CVE-2023-6500

Summary

CVE-2023-6500: A critical vulnerability affects the Shariff Wrapper plugin for WordPress. This Stored Cross-Site Scripting (XSS) issue allows authenticated attackers with contributor-level or higher permissions to inject malicious scripts into the 'shariff' shortcode's 'secondarycolor' and 'maincolor' attributes. Impacted versions include those up to and including 4.6.9. Users should update the plugin as soon as possible to mitigate the risk of script injection, which can execute whenever a user accesses an injected page.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.