CVE-2023-44479
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Summary
CVE-2023-44479 refers to a stored Cross-Site Scripting (XSS) vulnerability affecting the Jim Krill WP Jump Menu plugin versions 3.6.4 and below. This issue enables attackers to inject malicious scripts into a website, which can subsequently be executed when an administrator or other privileged user visits the affected page. An attacker could exploit this vulnerability to steal sensitive information, install malware, or carry out other malicious activities. To mitigate this risk, plugin users are advised to update to the latest version and implement input validation and output encoding measures.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions