CVE-2023-2113

Summary

CVE-2023-2113 is a vulnerability affecting the Autoptimize WordPress plugin before version 3.1.7. This issue allows high privileged users, including administrators, to inject arbitrary JavaScript into the admin panel. The settings imported from a previous export are not properly sanitized and escaped, enabling this attack even when the unfiltered_html capability is disabled. This vulnerability poses a significant risk in multisite setups, allowing unauthorized JavaScript injection, which could lead to data theft or unauthorized system access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.