CVE-2023-41874

Summary

CVE-2023-41874 is a newly disclosed Cross-Site Scripting (XSS) vulnerability impacting versions 3.20.0 and below of the Order Delivery Date plugin for WooCommerce by Tyche Softwares. An attacker can exploit this unauthenticated vulnerability to inject malicious scripts into a targeted user's web browser during a specially crafted request. Successful exploitation could result in the theft of sensitive user data, session hijacking, or even complete website takeover. Users are strongly advised to update their plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.