Stored Cross-Site Scripting Vulnerability in Font Awesome 4 Menus Plugin for WordPress

CVE-2023-4718

What is CVE-2023-4718?

The Font Awesome 4 Menus plugin for WordPress has a vulnerability that allows authenticated attackers with contributor-level and higher permissions to exploit stored cross-site scripting via the 'fa' and 'fa-stack' shortcodes. This weakness is due to inadequate input sanitization and output escaping on user-supplied attributes, enabling attackers to inject arbitrary web scripts. These scripts are executed whenever a user visits the affected page, compromising user security and potentially leading to further attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References