CVE-2023-49184

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Dec 15, 2023
Updated: Dec 19, 2023
CWE ID 79

Summary

CVE-2023-49184 is a Cross-site Scripting (XSS) vulnerability affecting the WPDeveloper Parallax Slider Block. The flaw, which allows Stored XSS attacks, is located in the way input is neutralized during web page generation. This issue can be exploited by attackers to inject malicious scripts into web pages viewed by other users, potentially leading to data theft or unauthorized actions. The vulnerability affects Parallax Slider Block versions from n/a through 1.2.4. Users are encouraged to update to a patched version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share