CVE-2023-0034

Summary

CVE-2023-0034 is a vulnerability affecting the JetWidgets For Elementor plugin used in WordPress sites. The issue lies in the plugin's failure to validate and sanitize shortcode attributes before outputting them, exposing sites to Stored Cross-Site Scripting (XSS) attacks. Contributors and users with higher roles can exploit this vulnerability by injecting malicious scripts within the affected pages or posts where the shortcode is embedded. Unpatched sites are susceptible to potential data theft or site takeover attacks. Upgrading to the latest version of the JetWidgets For Elementor plugin, 1.0.14 or above, mitigates this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.