CVE-2023-4407

Summary

CVE-2023-4407 is a critical vulnerability found in Codecanyon Credit Lite 1.5.4. The vulnerability affects the /portal/reports/account_statement file of the POST Request Handler component, allowing for SQL injection through manipulation of the date1/date2 argument. The attack can be launched remotely, posing a potential danger to organizations using the affected product. Remediation for this vulnerability is not provided in the source text.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.