CVE-2023-37983

Summary

CVE-2023-37983 is a stored Cross-Site Scripting (XSS) vulnerability affecting versions 0.2.4 and below of the Noël Jackson Art Direction plugin for WordPress. An attacker with contributor or higher privileges can inject malicious scripts into the plugin's settings page, which can then be executed whenever an administrator visits the page. These scripts could steal user data, manipulate content, or carry out other malicious actions. This vulnerability poses a significant risk to websites using the affected plugin and requires immediate patching or mitigation to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.