CVE-2023-30489

Summary

CVE-2023-30489 is a newly identified cross-site scripting (XSS) vulnerability affecting version 1.2.16 of the I Thirteen Web Solution Email Subscription Popup plugin. This issue allows an unauthorized attacker to inject malicious scripts into a targeted website, potentially stealing user data or gaining unauthorized access. The vulnerability can be triggered through reflected XSS attacks, allowing the attacker to deliver the payload via specially crafted URLs or forms. The exploitation of this vulnerability can pose a serious risk to website visitors and could lead to various attacks, including identity theft, data theft, or website defacement. It is strongly recommended that users of the I Thirteen Web Solution Email Subscription Popup plugin update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.