CVE-2023-47810
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-47810 is a vulnerability categorized as CWE-79 (Improper Neutralization of Input During Web Page Generation) with a base severity of MEDIUM. It affects the Asdqwe Dev Ajax Domain Checker plugin versions up to 1.3.0. The vulnerability allows for 'Cross-site Scripting' attacks, potentially enabling malicious actors to inject and execute arbitrary script code on affected websites. The exploit requires low privileges and user interaction, with a network-based attack vector. The impact on integrity and confidentiality is low, and the availability impact is none. The risk score of this vulnerability is 25 out of 100, and the NIST National Vulnerability Database has assigned it a base score of 5.4 out of 10. Remediation measures should be implemented promptly to prevent potential exploitation of this vulnerability in affected systems or websites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions