CVE-2023-5738
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Summary
CVE-2023-5738 is a vulnerability that affects the WordPress Backup & Migration WordPress plugin before version 1.4.4. It allows users with low-level roles, such as Subscribers, to execute Cross-Site Scripting (XSS) attacks due to the lack of sanitization and escaping of certain parameters. The vulnerability has a risk score of 25 and a base severity of MEDIUM according to NIST. The exploitability score is 2.3, indicating a moderate level of difficulty for attackers to exploit the vulnerability. Organizations using the affected plugin should update to version 1.4.4 or apply any available patches to remediate the issue. If left unaddressed, this vulnerability poses a potential danger as it can be exploited by malicious actors to inject malicious code into web pages, compromising user security and potentially leading to unauthorized access or data theft.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions