CVE-2023-2320

Summary

CVE-2023-2320 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the CF7 Google Sheets Connector and CF7 Google Sheets Connector Pro WordPress plugins before version 5.0.2. The issue stems from a failure to properly escape user-supplied data before outputting it in an HTML attribute. This flaw can be exploited by attackers to inject malicious scripts into web pages, allowing them to steal sensitive information or gain unauthorized access to high privilege user accounts, such as administrator accounts. Users are advised to update to the latest plugin version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.