CVE-2023-24397

Summary

CVE-2023-24397 is a stored Cross-Site Scripting (XSS) vulnerability affecting version 1.0.11 of the Reservation.Studio widget plugin. An attacker can exploit this admin privilege escalation flaw to inject malicious scripts into a targeted website, potentially stealing user data or taking control of user accounts. Successful exploitation requires the attacker to have administrative access to the website using the Reservation.Studio plugin. Website owners using affected plugin versions are advised to update to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.