CVE-2023-4862

CVSS 3.1 Score 4.8 of 10 (medium)

Details

Published Oct 16, 2023
Updated: Nov 7, 2023
CWE ID 79

Summary

The vulnerability with CVE ID CVE-2023-4862 affects the File Manager Pro WordPress plugin before version 1.8.1. It is a cross-site scripting (XSS) vulnerability that occurs due to inadequate validation and escaping of inputs by high-privilege users. The vulnerability has a base severity of MEDIUM with a base score of 4.8 according to NIST's National Vulnerability Database (NVD). It requires high privileges and user interaction, and can be exploited through the network. The impact on integrity and confidentiality is low, while the availability impact is none. The vulnerability poses a potential danger to organizations using the affected versions of the File Manager Pro plugin, as it can allow attackers to inject malicious scripts and compromise the security of the website or gain unauthorized access to sensitive information. To remediate this vulnerability, users should update their File Manager Pro plugin to version 1.8.1 or later, which includes adequate validation and escaping of inputs to mitigate XSS attacks.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-4862 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options