CVE-2023-6498

Summary

CVE-2023-6498: The Complianz plugin for WordPress, used for GDPR and CCPA compliance, contains a Stored Cross-Site Scripting (XSS) vulnerability. This issue, present in versions up to 6.5.5, stems from insufficient input sanitization and output escaping in the admin settings. Authenticated attackers with administrator access can exploit this flaw to inject malicious scripts into pages, which execute when users visit the manipulated pages. This vulnerability only affects multi-site installations and installations where unfiltered_html has been disabled.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.