CVE-2023-4862

Summary

The vulnerability with CVE ID CVE-2023-4862 affects the File Manager Pro WordPress plugin before version 1.8.1. It is a cross-site scripting (XSS) vulnerability that occurs due to inadequate validation and escaping of inputs by high-privilege users. The vulnerability has a base severity of MEDIUM with a base score of 4.8 according to NIST's National Vulnerability Database (NVD). It requires high privileges and user interaction, and can be exploited through the network. The impact on integrity and confidentiality is low, while the availability impact is none. The vulnerability poses a potential danger to organizations using the affected versions of the File Manager Pro plugin, as it can allow attackers to inject malicious scripts and compromise the security of the website or gain unauthorized access to sensitive information. To remediate this vulnerability, users should update their File Manager Pro plugin to version 1.8.1 or later, which includes adequate validation and escaping of inputs to mitigate XSS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.