CVE-2023-0333 TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS

The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

PT-2023-15025

Name of the Vulnerable Software and Affected Versions TemplatesNext ToolKit WordPress plugin versions prior to 3.2.8 Description The issue concerns the TemplatesNext ToolKit WordPress plugin, which does not properly validate and escape certain shortcode attributes before outputting them in a page...