CVE-2023-48124

Summary

CVE-2023-48124 is a Cross-Site Scripting (XSS) vulnerability affecting SUP Online Shopping version 1.0. Malicious actors can exploit this flaw by injecting malicious code into the Name, Email, and Address parameters during the Register New Account process. Successful attacks could result in the execution of arbitrary code on the victim's browser, potentially leading to data theft or unauthorized system access. This vulnerability poses a significant risk to any organization using this outdated version of SUP Online Shopping and should be addressed as soon as possible by applying the available patch or upgrade.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.