CVE-2023-39639
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-39639 is a newly disclosed SQL injection vulnerability affecting LeoTheme's leoblog up to version 3.1.2. Hackers can exploit this weakness through the LeoBlogBlog::getListBlogs component, allowing them to inject malicious SQL queries and potentially gain unauthorized access to sensitive data. This issue poses a serious threat to websites using the vulnerable version of leoblog and could lead to data theft or even complete system compromise. It is strongly recommended that users upgrade their leoblog installation as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.