CVE-2023-23891

Name of the Vulnerable Software and Affected Versions OceanWP Ocean Extra plugin versions <= 2.1.1

Description The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability that requires authentication with contributor or higher privileges. It affects the OceanWP Ocean Extra plugin when the OceanWP theme is installed and activated.

Recommendations For OceanWP Ocean Extra plugin versions <= 2.1.1, update to a version higher than 2.1.1 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's functionality that requires contributor or higher privileges until a patch is available.