CVE-2023-33213

25th percentile - higher than 25% of all known CVEs

The wpView plugin versions up to 1.3.0 contain a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will execute in the context of users' browsers.

This threat may lead to session data theft, user account takeover, and other malicious activities, which can severely damage the organization's reputation.

It is recommended to update the wpView plugin to the latest version to mitigate this vulnerability and conduct a security audit of the application.