← Database

CVE-2024-52053

CRITICAL CVSS: 9.6 Published: 2024-11-21 Modified: 2026-06-17

Description

Stored Cross-Site Scripting in the Manager component of Wowza Streaming Engine below 4.9.1 allows an unauthenticated attacker to inject client-side JavaScript into the web dashboard to automatically hijack admin accounts.

Affected Platforms

Wowza Streaming EngineLinux Linux KernelMicrosoft Windows

Weakness Type

CWE-79, CWE-79

References