CVE-2023-1121

CVE-2023-1121 refers to the WordPress plugin Simple Giveaways before version 2.45.1 . The root cause is that the plugin “does not sanitise and escape some of its settings,” enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (e.g., m...