CVE-2023-38474

Summary

CVE-2023-38474 is a Cross-site Scripting (XSS) vulnerability affecting Campaign Monitor for WordPress. The flaw, which allows Reflected XSS, resides in the way the plugin handles user input during web page generation. This issue can be exploited by attackers to inject malicious scripts into a victim's Campaign Monitor account, potentially leading to account takeover and data theft. The vulnerability affects Campaign Monitor for WordPress versions from n/a through 2.8.12.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.