Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Vulnerability in PropertyShift

CVE-2024-51762

What is CVE-2024-51762?

A reflected Cross-Site Scripting (XSS) vulnerability exists in PropertyShift due to improper neutralization of input when generating web pages. This flaw allows an attacker to inject malicious scripts into responses, which are then executed in the user's browser without their consent. Users visiting compromised URLs may experience UI manipulation or data theft, undermining the web application’s integrity and user security. The vulnerability impacts all versions of PropertyShift up to 1.0.0, emphasizing the urgency for users to secure their installations against potential exploitation.

References