Threats tagged 'ghsa-8x7c-xgmw-fg3x'

Multiple Supsystic Pro plugins were distributed containing malicious code due to a compromise of the vendor's update server. This vulnerability allows unauthenticated attackers to deploy a second-stage payload that can exfiltrate credentials and other sensitive data, as well as gain full control over affected websites. The issue is rated critical with a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.