CVE-2023-40330

Summary

CVE-2023-40330 is a newly disclosed vulnerability affecting versions 1.6.1 and below of the Milan Petrovic GD Security Headers plugin. This issue permits an unauthorized attacker to inject malicious scripts through a reflected cross-site scripting (XSS) attack. Successful exploitation could lead to the execution of arbitrary code in the context of the affected website, posing a significant security risk to users. We strongly recommend plugin users upgrade to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.