WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)

CVE-2023-33333

What is CVE-2023-33333?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Complianz and Complianz Premium plugins by Really Simple Plugins. This flaw allows attackers to exploit the CSRF issue, leading to potential Cross-Site Scripting (XSS) attacks. Affected users running versions of Complianz up to 6.4.4 and Complianz Premium up to 6.4.6.1 may face security risks if appropriate measures are not taken. Users are advised to update their plugins to the latest versions as a precautionary step.

References