CVE-2023-3356

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Aug 30, 2023

Updated: Nov 7, 2023

CWE ID 552

Summary

CVE-2023-3356 is a vulnerability affecting the Subscribers Text Counter plugin for WordPress before version 1.7.1. This issue exposes a Cross-Site Request Forgery (CSRF) weakness, permitting attackers to manipulate plugin settings undetected by an unsuspecting admin. Moreover, the lack of input sanitization and escaping in the plugin leads to Stored Cross-Site Scripting (XSS), potentially leading to more extensive compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Dolibarr

Affected Vendors

Dolibarr

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/roDJjd
https://www.cve.org/CVERecord?id=CVE-2023-3356
https://nvd.nist.gov/vuln/detail/CVE-2023-3356

Back to Vulnerability Database