CVE-2023-48317

Summary

CVE-2023-48317 is a Cross-site Scripting (XSS) vulnerability affecting the Vikas Vatsa Display Custom Post plugin. The flaw, which is a result of improper neutralization of user input during web page generation, enables stored XSS attacks. This issue can be exploited to inject malicious scripts into web pages viewed by other users, leading to potential data theft or unauthorized actions. The vulnerability impacts Display Custom Post versions 2.2.1 and below.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.