CVE-2023-47853

Summary

CVE-2023-47853 is a Cross-site Scripting (XSS) vulnerability affecting the myCred myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin. The flaw, which allows Stored XSS, exists in the plugin's web page generation process. This issue can be exploited by attackers to execute malicious scripts on users' browsers, potentially leading to unauthorized access, data theft, or other malicious activities. The vulnerability can be found in the plugin versions from n/a through 2.6.1. Users are strongly advised to update to a secure and patched version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.