CVE-2023-4471

Summary

CVE-2023-4471 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Order Tracking Pro plugin for WordPress. The issue lies in the insufficient input sanitization and output escaping of the start_date and end_date parameters, which can be exploited by unauthenticated attackers. By injecting arbitrary web scripts, they can manipulate pages and trick users into executing malicious code, potentially leading to data theft or site takeover. This vulnerability exists in versions up to and including 3.3.6.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.