CVE-2023-4653

Summary

CVE-2023-4653 is a Cross-Site Scripting (XSS) vulnerability affecting the instantsoft/icms2 GitHub repository prior to version 2.16.1-git. Malicious scripts injected into a stored location within the application could be executed in users' browsers, potentially stealing sensitive data or taking unauthorized actions on behalf of the affected user. This issue poses a significant risk to users who visit affected websites, making it crucial for users and administrators to apply the necessary patch or upgrade to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.