CVE-2023-3785
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Summary
CVE-2023-3785 is a newly disclosed vulnerability affecting the PaulPrinting CMS 2018. This issue, rated as problematic, impacts an unidentified functionality of the software. The vulnerability allows for cross-site scripting (XSS) attacks through the manipulation of the firstname, lastname, address, city, and state arguments. An attacker can launch these attacks remotely, potentially injecting malicious scripts into unsuspecting users' browsers. The exploit for this vulnerability has been made public, making it a significant security concern for organizations using the affected CMS.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.