CVE-2022-47421

Summary

CVE-2022-47421 is a stored Cross-Site Scripting (XSS) vulnerability affecting both the free and premium versions of Repute InfoSystems ARMember plugins. An attacker can exploit this administrative-level weakness to inject malicious scripts into a vulnerable website, potentially gaining unauthorized access to user data or taking control of the site. Successful exploitation requires authentication, making this a significant threat for sites utilizing these ARMember plugins. Immediate patching or mitigation measures are recommended to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.