CVE-2023-0545

Summary

CVE-2023-0545 is a vulnerability affecting the Hostel WordPress plugin before version 1.1.5.2. This issue permits high privilege users, including admins, to execute Stored Cross-Site Scripting (XSS) attacks, bypassing the unfiltered_html capability restriction in multisite setups. The plugin fails to properly sanitize and escape certain settings, creating a security loophole that attackers can exploit to inject malicious scripts into WordPress websites. This vulnerability poses a significant risk, as it can lead to data theft, unauthorized access, and other malicious activities. It is recommended that users update to the latest version of the Hostel plugin to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.