CVE-2023-36691

Summary

CVE-2023-36691 represents a Cross-Site Request Forgery (CSRF) vulnerability in the Albert Peschar WebwinkelKeur plugin, affecting versions 3.24 and below. This issue allows an attacker to manipulate a user's browser into performing unintended actions on a website, by forging malicious requests on their behalf. The consequence is potential data theft or modification, with the user remaining unaware of the attack. It is crucial for users to update their plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.