CVE-2023-5200

Summary

CVE-2023-5200 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the flowpaper plugin for WordPress. This issue allows authenticated attackers with contributor-level access and above to inject malicious scripts via the 'flipbook' shortcode in versions up to 2.0.3. The vulnerability stems from insufficient input sanitization and output escaping on user-supplied attributes, enabling attackers to execute arbitrary web scripts. As a result, pages containing injected code will run the scripts each time a user accesses them.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.