CVE-2023-1119

Summary

CVE-2023-1119 refers to a cross-site scripting (XSS) vulnerability affecting the WP-Optimize plugin before version 3.2.13 and SrbTransLatin plugin before version 2.4.1 for WordPress. These plugins utilize a third-party library that fails to properly escape certain HTML characters, allowing an attacker to inject malicious scripts into a victim's website. Successful exploitation can result in unauthorized access, data theft, or website defacement. Users are advised to update these plugins to their latest versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.