CVE-2023-48925

Summary

CVE-2023-48925 is a newly disclosed SQL injection vulnerability that affects the Buy Addons bavideotab module before version 1.0.6. An attacker can exploit this flaw in the BaVideoTabSaveVideoModuleFrontController::run() function to inject malicious SQL queries and escalate privileges. Successful exploitation may result in the unauthorized obtainment of sensitive information. This vulnerability poses a significant risk to websites using the affected version of the module and requires immediate attention and patching to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.