CVE-2023-34377

25th percentile - higher than 25% of all known CVEs

The My Content Management plugin versions up to 1.7.6 has a stored Cross-Site Scripting (XSS) vulnerability with admin authorization. An attacker can exploit this flaw to inject malicious scripts that will be executed in the victim's browser context.

This vulnerability may lead to session data theft, administrator account takeover, or other malicious actions, posing a serious threat to the organization's security.

It is recommended to update the My Content Management plugin to the latest version to mitigate this vulnerability. Additionally, conducting a security audit of the application to identify other potential flaws is advisable.