CVE-2023-5951

Summary

CVE-2023-5951 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Welcart e-Commerce plugin for WordPress. Before version 2.9.5, the plugin did not properly sanitize and escape user input, allowing an attacker to inject malicious scripts into pages viewed by high-privilege users, such as admins, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.