Vulnerability Details CVE-2023-43982
Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at insta_parser.php. This vulnerability allows attackers to use the vulnerable website as proxy to attack other websites or exfiltrate data via a HTTP call.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2023-43982
-
cpe:2.3:a:bontheme:socialfeed_-_photos_&_video_using_instagram_api:5.2.1
-
cpe:2.3:a:bontheme:socialfeed_-_photos_&_video_using_instagram_api:5.2.3
-
cpe:2.3:a:bontheme:socialfeed_-_photos_&_video_using_instagram_api:6.0.0