CVE-2023-0162

The CVE-2023-0162 entry concerns the CPO Companion WordPress plugin (versions up to and including 1.0.4). Root cause: insufficient input sanitization and output escaping in several content-type settings parameters, enabling Stored XSS. Impact: authenticated attackers with administrator-level perm...