CVE-2023-45602

Summary

CVE-2023-45602 is a newly disclosed Cross-Site Scripting (XSS) vulnerability affecting the Ebook Store plugin by Shopfiles Ltd. versions up to 5.785. An attacker can exploit this unauthenticated reflection XSS flaw to inject malicious scripts into a victim's web browser, potentially leading to session hijacking, data theft, or other malicious activities. This issue poses a significant risk to users, especially those using outdated plugin versions, and requires immediate remediation through updating to the latest patched version.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.