Cross-Site Scripting Vulnerability in DuoGeek Custom Dashboard Widget

CVE-2024-56024

Summary

The DuoGeek Custom Dashboard Widget contains a vulnerability that permits improper neutralization of user input during web page generation, specifically a reflected cross-site scripting flaw. This allows attackers to inject malicious scripts into the web application, which can then be executed in the context of the victim's browser. As a result, users interacting with affected versions, ranging from n/a to 1.0.0, may be susceptible to tricks that could lead to data theft or unauthorized actions.

References