CVE-2023-38974

Summary

CVE-2023-38974 is a stored cross-site scripting (XSS) vulnerability affecting the Edit Category function in Badaso v2.9.7. This issue allows attackers to inject malicious web scripts or HTML into the Title parameter, which is then stored and executed whenever the affected category is viewed by other users. The exploitation of this vulnerability could lead to theft of user data, unauthorized account access, or other malicious activities. Users are strongly urged to update to the latest version of Badaso to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.