CVE-2023-2321

Summary

CVE-2023-2321 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the WPForms Google Sheet Connector plugin before version 3.4.6 and the gsheetconnector-wpforms-pro plugin through version 3.4.6 for WordPress. Malicious scripts can be injected into the plugin's input fields due to insufficient input validation. This issue could potentially be exploited by attackers to gain unauthorized access to high-privilege user accounts, such as administrators, by injecting malicious code into forms and executing it in the context of the targeted website. Users are advised to upgrade to the latest versions of these plugins to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.