CVE-2023-51488

Summary

CVE-2023-51488 is a Cross-site Scripting (XSS) vulnerability affecting Automattic, Inc.'s Crowdsignal Dashboard version 3.0.11 and below. The issue stems from improper neutralization of user-supplied data during web page generation. Malicious scripts can be injected into polls or surveys created through the dashboard, potentially allowing attackers to steal user data or take control of user sessions. This vulnerability poses a significant risk to organizations using Crowdsignal Dashboard for creating and managing polls and surveys.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.