What is CVE-2023-1119?

CVE-2023-1119 is a cross-site scripting (XSS) vulnerability found in the WP-Optimize WordPress plugin before version 3.2.13 and the SrbTransLatin WordPress plugin before version 2.4.1.

What is the severity of CVE-2023-1119?

The severity of CVE-2023-1119 is medium, with a CVSS score of 6.1.

Which software is affected by CVE-2023-1119?

CVE-2023-1119 affects the WP-Optimize WordPress plugin before version 3.2.13 and the SrbTransLatin WordPress plugin before version 2.4.1.

How does CVE-2023-1119 work?

CVE-2023-1119 is caused by a third-party library used by the affected plugins that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.

How can I fix CVE-2023-1119?

To fix CVE-2023-1119, users should update the WP-Optimize WordPress plugin to version 3.2.13 or newer and the SrbTransLatin WordPress plugin to version 2.4.1 or newer.

Vulnerability/
CVE-2023-1119

medium

6.1

CWE

10/7/2023

2/8/2024

CVE-2023-1119: Multiple Plugins - Cross-Site Scripting From Third-party Library

First published: Mon Jul 10 2023(Updated: )

The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin before 2.4.1 use a third-party library that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.

Credit: contact@wpscan.com contact@wpscan.com

Affected Software	Affected Version	How to fix
Srbtranslatin Project Srbtranslatin	<2.4
Updraftplus Wp-optimize	<3.2.13

Never miss a vulnerability like this again

Reference Links

https://wpscan.com/vulnerability/2e78735a-a7fc-41fe-8284-45bf451eff06

Frequently Asked Questions

What is CVE-2023-1119?
CVE-2023-1119 is a cross-site scripting (XSS) vulnerability found in the WP-Optimize WordPress plugin before version 3.2.13 and the SrbTransLatin WordPress plugin before version 2.4.1.
What is the severity of CVE-2023-1119?
The severity of CVE-2023-1119 is medium, with a CVSS score of 6.1.
Which software is affected by CVE-2023-1119?
CVE-2023-1119 affects the WP-Optimize WordPress plugin before version 3.2.13 and the SrbTransLatin WordPress plugin before version 2.4.1.
How does CVE-2023-1119 work?
CVE-2023-1119 is caused by a third-party library used by the affected plugins that removes the escaping on some HTML characters, leading to a cross-site scripting vulnerability.
How can I fix CVE-2023-1119?
To fix CVE-2023-1119, users should update the WP-Optimize WordPress plugin to version 3.2.13 or newer and the SrbTransLatin WordPress plugin to version 2.4.1 or newer.

collector/nvd-latest
collector/nvd-api
collector/nvd-index
agent/author
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/references
agent/title
agent/last-modified-date
agent/severity
agent/tags
agent/description
agent/first-publish-date
agent/event
vendor/srbtranslatin project
canonical/srbtranslatin project srbtranslatin
vendor/updraftplus
canonical/updraftplus wp-optimize

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.