CVE-2023-5956

Summary

CVE-2023-5956 is a vulnerability affecting the Wp-Adv-Quiz plugin for WordPress. This issue allows high privilege users, such as administrators, to carry out Stored Cross-Site Scripting (XSS) attacks, bypassing the unfiltered_html capability restriction, even in multisite setups. The plugin fails to sanitize and escape certain settings, allowing malicious code to be injected and executed. This could potentially lead to unauthorized access, data theft, or further exploitation. Users are advised to update to the latest plugin version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.