CVE-2023-3168

Summary

CVE-2023-3168 is a stored Cross-Site Scripting (XSS) vulnerability affecting the WP Reroute Email plugin for WordPress. Versions up to and including 1.4.9 are impacted by this issue, which stems from insufficient input sanitization and output escaping in the handling of email subjects. An attacker can exploit this vulnerability by injecting arbitrary web scripts, leading to the execution of malicious code whenever a user accesses an injected page. This poses a significant risk for unauthenticated attackers to gain unintended access and manipulate user interactions on vulnerable websites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.