CVE-2023-39306

Summary

CVE-2023-39306 is a Cross-Site Scripting (XSS) vulnerability affecting ThemeFusion Fusion Builder from undisclosed versions up to 3.11.1. An attacker can exploit this improper input neutralization during web page generation to inject malicious scripts into a victim's web browser, potentially stealing sensitive information or taking control of the user's session. This issue poses a significant security risk and requires immediate attention from ThemeFusion to release a patch. Users are recommended to update their Fusion Builder instances as soon as the patch becomes available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.