CVE-2023-51480

Summary

CVE-2023-51480 is a Cross-site Scripting (XSS) vulnerability affecting the Active Products Tables for WooCommerce by realmag777. This professional plugin, used for managing products in WooCommerce stores, contains an improper neutralization of input during web page generation. An attacker can exploit this flaw to inject malicious scripts into web pages viewed by other users. The vulnerability has been identified in versions 1.0.1 through 1.0.6. Store owners using these affected versions should apply the necessary security updates promptly to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.