WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)

CVE-2023-38474

What is CVE-2023-38474?

A Cross-site Scripting (XSS) vulnerability exists in the Campaign Monitor for WordPress plugin, particularly affecting versions up to 2.8.12. This issue arises from improper neutralization of user input during web page generation, allowing attackers to inject malicious scripts that could be executed in the context of the user's browser. This vulnerability can lead to unauthorized actions, data manipulation, and compromise of user information. Admins and users of the affected versions are advised to apply patches swiftly to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References