CVE-2023-38969

Summary

CVE-2023-38969 is a Cross-Site Scripting (XSS) vulnerability affecting Badaso version 2.9.7. This issue allows remote attackers to inject and execute malicious code by crafting a malicious title parameter in the new book and edit book functions. Successful exploitation can lead to the theft of user data or unauthorized actions on affected systems. Users are strongly advised to update to the latest version of Badaso to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.