CVE-2023-23738: WordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email Spoofing Vulnerability
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Brainstorm Force Spectra allows Content Spoofing, Phishing.This issue affects Spectra: from n/a through 2.3.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-23738?
CVE-2023-23738 has been classified as a high-severity vulnerability due to its potential to allow content spoofing and phishing.
How do I fix CVE-2023-23738?
To fix CVE-2023-23738, update Brainstorm Force Spectra to the latest version beyond 2.3.0.
Who is affected by CVE-2023-23738?
CVE-2023-23738 affects users of Brainstorm Force Spectra and WordPress Spectra versions up to and including 2.3.0.
What type of vulnerability is CVE-2023-23738?
CVE-2023-23738 is classified as an injection vulnerability resulting from improper neutralization of special elements in output.
What kind of attacks can CVE-2023-23738 enable?
CVE-2023-23738 can enable content spoofing and phishing attacks, compromising user trust.