CVE-2023-41237

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Sep 27, 2023
Updated: Sep 28, 2023
CWE ID 79

Summary

CVE-2023-41237 is a newly discovered Cross-Site Scripting (XSS) vulnerability affecting versions 1.0.8 and below of the Everest Themes Arya Multipurpose Pro theme. An attacker can exploit this unauthenticated reflection XSS flaw to inject malicious scripts into a user's web browser while browsing a vulnerable website. Consequences of a successful attack can include session hijacking, data theft, or even complete website takeover. Users are strongly advised to update their theme to the latest version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share