CVE-2023-43982

CRITICO 9.8CVE-2023-43982 · Published 03/11/2023 · updated 17/06/2026

In breve

CVE-2023-43982 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda socialfeed - photos & video using instagram api (bontheme).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.68%, superiore al 52.4% delle vulnerabilità.
Correzione: aggiornare a 7.0.0 o successiva.

Package	Affected versions	Patched versions
socialfeed - photos & video using instagram api bontheme	`≥ 5.2.1, < 7.0.0`	`7.0.0`

Description

Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at insta_parser.php. This vulnerability allows attackers to use the vulnerable website as proxy to attack other websites or exfiltrate data via a HTTP call.

References

security.friendsofpresta.org/modules/2023/11/02/boninstagramcarousel.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free