CVE-2023-47815

Summary

CVE-2023-47815 is a Cross-site Scripting (XSS) vulnerability affecting the Venutius BP Profile Shortcodes Extra plugin versions 2.5.2 and below. An attacker can exploit this flaw by injecting malicious scripts into a webpage generated by the plugin, potentially stealing user information or taking control of user sessions. The vulnerability arises due to insufficient input validation, allowing arbitrary code injection. Users are advised to update their plugin to the latest version or consider disabling the vulnerable feature to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.