CVE-2023-5141

Summary

CVE-2023-5141 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the BSK Contact Form 7 Blacklist plugin for WordPress. This issue, present in versions 1.0.1 and below, allows attackers to inject malicious code into the inserted_count parameter, which is not properly sanitised or escaped before being displayed on the page. Those with high privilege, such as admins, are particularly susceptible to this exploit. Successful attacks could result in unauthorized access to sensitive data or functionality, potentially leading to significant security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.