Security Advisory

CVE-2024-52053

9.6
CRITICAL

Vulnerability Description

Stored Cross-Site Scripting in the Manager component of Wowza Streaming Engine below 4.9.1 allows an unauthenticated attacker to inject client-side JavaScript into the web dashboard to automatically hijack admin accounts.
Published Date November 21, 2024
Official Source NIST NVD Advisory