CVE-2023-43982

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-03 · updated 2026-06-17
Weakness: CWE-918

Description

Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at insta_parser.php. This vulnerability allows attackers to use the vulnerable website as proxy to attack other websites or exfiltrate data via a HTTP call.

Affected products

Bontheme Socialfeed - Photos & Video Using Instagram Api: from 5.2.1 before 7.0.0 — fixed in 7.0.0

How to fix

Upgrade to a fixed version: Bontheme Socialfeed - Photos & Video Using Instagram Api 7.0.0. Check the vendor advisory for mitigations.

References

https://security.friendsofpresta.org/modules/2023/11/02/boninstagramcarousel.html
https://security.friendsofpresta.org/modules/2023/11/02/boninstagramcarousel.html

Get alerted when CVE-2023-43982 or the next vulnerability affects your stack