The Bit Assist plugin for WordPress is vulnerable to a security issue which can be exploited by attackers who have administrator-level access to the website. This vulnerability exists in versions up to and including 1.1.9, and it allows them to inject arbitrary web scripts into pages of the website. These scripts will run anytime someone visits the page. This vulnerability only affects multi-site installations and installations where unfiltered_html has been disabled.