CVE-2024-44731
Medium
Description
Mirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary code via sending crafted payloads in messages to other users over RTC connections.
SeverityMedium
CVSS4.7
Exploit probability—
ProductMirotalk
PublishedOct 11, 2024
First seenOct 11, 2024
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- Mirotalkcommit 9de226 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Mirotalk | No range specified | commit 9de226 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.