PT-2023-16768 · WordPress · Wp-Optimize+1

Paolo Elia · Publicado 2023-07-10 · Atualizado 2025-01-06 · CVE-2023-1119

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP-Optimize WordPress plugin versions prior to 3.2.13 SrbTransLatin WordPress plugin versions prior to 2.4.1

Description The issue arises from the use of a third-party library that removes escaping on some HTML characters, leading to a cross-site scripting vulnerability. This allows for potential malicious script injection and execution.

Recommendations For WP-Optimize WordPress plugin versions prior to 3.2.13, update to version 3.2.13 or later. For SrbTransLatin WordPress plugin versions prior to 2.4.1, update to version 2.4.1 or later.

Exploit

Correção

Identificadores relacionados

CVE-2023-1119

Produtos afetados

Srbtranslatin

Wp-Optimize

Referências · 5

• 🔥 https://wpscan.com/vulnerability/2e78735a-a7fc-41fe-8284-45bf451eff06 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1119 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-1119 · Aviso do Fabricante
• https://t.me/cibsecurity/66256 · Publicação no Telegram
• https://t.me/cvenotify/56401 · Publicação no Telegram