CVE-2023-49174
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Dec 15, 2023
Updated: Dec 19, 2023
CWE ID 79
Summary
CVE-2023-49174 is a Cross-site Scripting (XSS) vulnerability affecting the dFactory Responsive Lightbox & Gallery. The issue allows an attacker to inject malicious scripts into web pages generated by the software, potentially leading to stolen user data or unauthorized actions. This vulnerability exists in versions of the Responsive Lightbox & Gallery from n/a through 2.4.5. Users are strongly advised to update to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share