CVE-2023-28779

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Vladimir Statsenko Terms descriptions plugin = 3.4.4 versions...

CVE-2023-28779

CVE-2023-28779 affects the WordPress plugin “Terms descriptions” by Vladimir Statsenko. The vulnerability is an unauthenticated Reflected Cross-Site Scripting (XSS) in terms descriptions plugin versions ≤ 3.4.4. The issue arises from the plugin’s handling of input that can be reflected in output,...