CVE-2023-36847

Summary

CVE-2023-4407 is a critical vulnerability affecting the Codecanyon Credit Lite 1.5.4 component's POST Request Handler. An unknown functionality of the file /portal/reports/account_statement is exploited through a sql injection attack, which can be triggered by manipulating the arguments date1 and date2. This vulnerability allows remote attackers to exploit the system. The associated identifier for this issue is VDB-237511.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.