CVE-2023-38545

Summary

CVE-2023-45607 is a stored Cross-Site Scripting (XSS) vulnerability affecting version 6.3.2 and below of the Hector Cabrera WordPress Popular Posts plugin. An attacker can inject malicious scripts into a website by exploiting the authentication bypass in the plugin's contributor role. Successful exploitation of this vulnerability allows the attacker to execute arbitrary code in the user's browser, potentially leading to session hijacking or data theft. Website owners using the affected plugin version should update to the latest version or apply a fix to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.