CVE-2023-40553
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Sep 6, 2023
Updated: Sep 8, 2023
CWE ID 79
Summary
CVE-2023-40553 is a newly discovered cross-site scripting (XSS) vulnerability affecting versions 1.3.3 and below of the Plausible Analytics plugin for WordPress, used by websites to self-host their web analytics data. An attacker can exploit this unauthenticated XSS vulnerability by injecting malicious scripts into a targeted website's analytics requests, potentially stealing user data or taking control of user sessions. Websites utilizing this plugin are urged to update to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share