CVE-2023-44479

Summary

CVE-2023-44479 refers to a stored Cross-Site Scripting (XSS) vulnerability affecting the Jim Krill WP Jump Menu plugin versions 3.6.4 and below. This issue enables attackers to inject malicious scripts into a website, which can subsequently be executed when an administrator or other privileged user visits the affected page. An attacker could exploit this vulnerability to steal sensitive information, install malware, or carry out other malicious activities. To mitigate this risk, plugin users are advised to update to the latest version and implement input validation and output encoding measures.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.