CVE-2024-10454 exposes Clibo Manager v1.1.9.12 to clickjacking attacks via the '/public/login' directory. This vulnerability stems from a missing X-Frame-Options header, allowing attackers to trick users into unknowingly clicking malicious links. While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) is 30. Even though an SVRS of 30 is not critical, the 'In The Wild' tag suggests active exploitation. An attacker could overlay a transparent iframe, hijacking clicks and potentially gaining unauthorized access or performing unwanted actions. This security flaw poses a risk to user accounts and data integrity within the Clibo Manager application. Addressing this vulnerability by implementing the X-Frame-Options header is essential to mitigate potential exploitation.