CVE-2023-1119 — Multiple Plugins - Cross-Site Scripting From Third-party Library

CVE-2023-1119

Multiple Plugins - Cross-Site Scripting From Third-party Library PUBLISHED

Description (CNA)

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.

Affected (CNA)

Vendor / product	Versions
Unknown / WP-Optimize	affected 0 before 3.2.13
Unknown / SrbTransLatin	affected 0 before 2.4.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/2e78735a-a7fc-41fe-8284-45bf451eff06

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/2e78735a-a7fc-41fe-8284-45bf451eff06

CISA-ADP

No English description supplied.

No references supplied.