CVE-2023-6091

Summary

CVE-2023-6091 is a file upload vulnerability affecting the Theme Editor component from version n/a through 2.7.1. An attacker can exploit this vulnerability to upload dangerous file types unrestrictedly, potentially leading to arbitrary code execution and compromise of the affected system. This issue poses a significant risk to websites utilizing the vulnerable Theme Editor and underscores the importance of regular software updates and secure configuration settings.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.