CVE-2023-46077

Summary

CVE-2023-46077 is a newly discovered reflected Cross-Site Scripting (XSS) vulnerability affecting version 2.2.5 of The Awesome Feed – Custom Feed plugin by Arrow Plugins. An attacker can exploit this unauthenticated XSS vulnerability by injecting malicious code into a specially crafted feed URL. Successful exploitation could lead to the execution of arbitrary scripts in the user's browser, potentially resulting in session hijacking, data theft, or other unintended actions. To mitigate this risk, users are advised to upgrade their plugin to the latest, patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.