CVE-2023-48201

Summary

CVE-2023-48201 is a Cross-Site Scripting (XSS) vulnerability affecting Sunlight CMS version 8.0.1. This issue enables remote authenticated attackers to inject malicious scripts into the Content text editor component, allowing them to execute arbitrary code and potentially escalate privileges within the system. Successful exploitation of this vulnerability could lead to unauthorized data access or modification, and even system takeover. It is recommended that affected organizations upgrade to the latest version of Sunlight CMS or apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.