Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-1119

Multiple Plugins - Cross-Site Scripting From Third-party Library

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP-Optimize

Default version status: unaffected

  • 0 to < 3.2.13affected

Unknown SrbTransLatin

Default version status: unaffected

  • 0 to < 2.4.1affected

References