CVE-2023-31754

Name of the Vulnerable Software and Affected Versions Optimizely CMS UI versions prior to 12.16.0

Description The issue is a cross-site scripting (XSS) vulnerability that can be exploited via the Admin panel. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control.

Recommendations For versions prior to 12.16.0, update to version 12.16.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Admin panel to minimize the risk of exploitation.