CVE-2023-25782

CVE-2023-25782 affects the WordPress plugin Service Area Postcode Checker ≤ 2.0.8. The issue is an authentication-related Cross‑Site Scripting flaw that can be triggered with admin+ privileges, per CVE and vendor records. Root cause described in related advisories is insufficient sanitization/esc...

CVE-2023-25782: Improper Neutralization of Input During Web Page Generation

Auth. admin+ vulnerability in Second2none Service Area Postcode Checker plugin = 2.0.8 versions...