CVE-2023-40627
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Dec 14, 2023
Updated: Dec 18, 2023
CWE ID 79
Summary
CVE-2023-40627 is a reflected Cross-Site Scripting (XSS) vulnerability identified in the LivingWord component used with Joomla. Maliciously crafted input can be used to inject and execute malicious scripts in a user's browser, potentially leading to data theft or unauthorized account access when viewing a page containing the vulnerable component. Users are advised to update their Joomla installations with the latest patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share