WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

CVE-2023-45837

What is CVE-2023-45837?

The XYDAC Ultimate Taxonomy Manager plugin for WordPress is susceptible to a reflected Cross-Site Scripting (XSS) vulnerability, which affects versions up to 2.0. This security flaw allows attackers to inject malicious scripts into web pages viewed by other users. When an unsuspecting user visits the compromised page, the hostile script executes in their browser, potentially leading to session hijacking, data theft, or defacement of the site. Website administrators using this plugin must take immediate action to secure their sites and mitigate the risk posed by this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References