CyberRota Analysis
AI-GeneratedThe Bit Assist plugin for WordPress, prior to version 1.7.2, is vulnerable to Stored Cross-Site Scripting (XSS) in its Call-To-Action feature, allowing authenticated administrators to inject malicious scripts. This could lead to redirection of users to harmful sites or unauthorized control over user accounts. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WordPress plugin (Bit Assist) before 1.7.2 is affected by Stored Cross-Site Scripting in Call-To-Action feature. An authenticated attacker with the privileged role (admin) can exploit this to redirect user to malicious site or control the account.