CVE-2022-4119: Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS
The Image Optimizer, Resizer and CDN WordPress plugin before 6.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed (for example in multisite setup).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4119?
CVE-2022-4119 has been classified as a high severity vulnerability due to its potential for allowing stored Cross-Site Scripting attacks.
How do I fix CVE-2022-4119?
To remediate CVE-2022-4119, update the Image Optimizer, Resizer and CDN plugin to version 6.8.1 or later immediately.
Who is affected by CVE-2022-4119?
CVE-2022-4119 affects users of the Image Optimizer, Resizer and CDN WordPress plugin versions prior to 6.8.1.
What types of attacks can CVE-2022-4119 facilitate?
CVE-2022-4119 can facilitate Stored Cross-Site Scripting attacks, allowing high privilege users to inject malicious scripts.
Can administrators be vulnerable to CVE-2022-4119?
Yes, even administrators can be vulnerable to CVE-2022-4119, as it targets high privilege users who can execute stored scripts.