Stored XSS Vulnerability in Digital Zoom Studio Parallaxer
CVE-2024-51848
Currently unrated
Key Information:
- Vendor
- Digital Zoom Studio
- Status
- Parallaxer
- Vendor
- CVE Published:
- 19 November 2024
Summary
A vulnerability has been identified in the Digital Zoom Studio Parallaxer plugin, which allows for improper neutralization of input during web page generation, leading to Stored Cross-site Scripting (XSS) attacks. This security flaw affects versions from n/a through 1.00, enabling attackers to inject malicious scripts that may be executed in the context of a user's session, potentially compromising sensitive information and the integrity of web applications.
References
Timeline
Vulnerability published