CVE-2023-46626

Summary

CVE-2023-46626 is an unauthorized Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.1.7 and below of the FLOWFACT WP Connector plugin. An attacker can exploit this issue by injecting malicious scripts into a webpage viewed by other users, potentially gaining access to sensitive information or taking control of their sessions. This can lead to data theft or unauthorized actions within the affected application. Users are strongly encouraged to update their plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.