CVE-2023-3652

Summary

CVE-2023-3652 is a Cross-site Scripting (XSS) vulnerability affecting Digital Ant E-Commerce Software versions before 11. An attacker can exploit this Improper Neutralization of Input during web page generation issue to inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or taking control of their browsers. This poses a serious security risk and requires affected users to upgrade to the latest version of the software as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.