CVE-2023-45068

Summary

CVE-2023-45068 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Supsystic Contact Form plugin by Supsystic. Versions 1.7.27 and below are reportedly impacted. A CSRF vulnerability enables an attacker to trick a user into performing an unintended action on a web application, such as modifying account settings or making unauthorized transactions, by intercepting and manipulating the user's session. This issue poses a significant risk to websites using the vulnerable plugin, particularly those with user authentication and sensitive data handling. It is essential that users update their plugin to the latest version or take alternative measures to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.