Stored Cross-Site Scripting Vulnerability Affects Authenticated Users

CVE-2024-8723

What is CVE-2024-8723?

The 012 Ps Multi Languages plugin for WordPress is susceptible to a Stored Cross-Site Scripting attack. This vulnerability occurs due to inadequate input sanitization and output escaping associated with translated titles. Authenticated attackers with contributor-level access or higher can exploit this flaw to inject arbitrary web scripts into pages. These scripts will execute when users access the compromised pages, leading to potential theft of sensitive information or other malicious actions.

References