CVE-2023-36385

Summary

CVE-2023-36385 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting version 2.9.9 and below of the wpxpo PostX – Gutenberg Post Grid Blocks plugin for WordPress. An attacker can exploit this unauthenticated XSS flaw to inject malicious scripts into a victim's webpage, potentially stealing sensitive information or taking control of their account. This vulnerability poses a significant security risk, especially for websites that use the affected plugin and have not yet applied the necessary security patch. Users are urged to update their plugin as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.