CVE-2023-47755
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2023-47755 is a Cross-Site Scripting (XSS) vulnerability affecting the AazzTech WooCommerce Product Carousel Slider plugin in versions 3.3.5 and below. This issue arises due to improper neutralization of user inputs during web page generation. Successful exploitation of this vulnerability could allow attackers to inject malicious scripts, potentially leading to account takeover, data theft, or other unintended actions by unsuspecting users. It is recommended that users update the plugin to its latest version or consider removing it if it's no longer needed to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.