CVE-2023-43875

Summary

CVE-2023-43875 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting Subrion CMS version 4.2.1. An attacker, who has local access, can exploit this issue by injecting malicious scripts into specific input fields, including dbhost, dbname, dbuser, adminusername, and adminemail. Successful exploitation allows the attacker to execute arbitrary web scripts on unsuspecting victims, leading to potential data theft or unauthorized system access. This vulnerability underscores the importance of keeping content management systems updated to mitigate security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.