First published: Tue Nov 19 2024(Updated: )
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Zoom Studio Parallaxer allows Stored XSS.This issue affects Parallaxer: from n/a through 1.00.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
Digital Zoom Studio | <=1.00 | |
WordPress Parallaxer | <=1.00 |
Deactivate and delete.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-51848 is categorized as a high severity Stored Cross-site Scripting (XSS) vulnerability.
To fix CVE-2024-51848, update Digital Zoom Studio Parallaxer to version 1.01 or later.
Exploitation of CVE-2024-51848 allows attackers to execute arbitrary JavaScript in the context of a victim's browser, potentially leading to data theft and account compromise.
CVE-2024-51848 affects Digital Zoom Studio Parallaxer from version n/a up to and including version 1.00.
You can determine if your site is vulnerable to CVE-2024-51848 by checking the version of Digital Zoom Studio Parallaxer installed on your site.