CVE-2023-4298

Summary

CVE-2023-4298 is a vulnerability affecting the 123.chat WordPress plugin before version 1.3.1. This issue permits Stored Cross-Site Scripting attacks, allowing high privilege users, including admins, to inject malicious scripts into the plugin's settings, bypassing the unfiltered_html capability restriction, even in multisite setups.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.