CVE-2023-48202

Summary

CVE-2023-48202 is a Cross-Site Scripting (XSS) vulnerability affecting Sunlight CMS 8.0.1. An authenticated low-privileged user can exploit this flaw by uploading a maliciously crafted SVG file to the File Manager component. Successful exploitation allows the attacker to inject and execute malicious scripts in the victim's browser, potentially leading to privilege escalation. This vulnerability poses a serious risk to websites using the Sunlight CMS version 8.0.1 and necessitates immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.