A Stored Cross-Site Scripting (XSS) vulnerability is when the software has a flaw that allows a hacker to upload a malicious file that can then attack someone else who visits the site.

There are different kinds of stored XSS vulnerabilities and it isn’t clear which kind this is.However, depending on where the malicious file is uploaded, this type of vulnerability can be especially problematic when someone with admin level privileges visits the site and receives the payload, which can lead to a total site takeover.

#wordpress #autoptimize

Vulnerability in the WordPress Autoptimize Plugin Affects +1 Million Sites
1.40 GEEK