CVE-2023-39988

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in 标准云std.Cloud WxSync plugin = 2.7.23 versions...

CVE-2023-39988

CVE-2023-39988 describes a Stored Cross-Site Scripting (XSS) vulnerability in the WxSync plugin for std.Cloud/WxSync (WordPress) <= 2.7.23. The issue is exploitable by authenticated contributors and can lead to stored malicious scripts within the plugin’s context. Public records indicate the a...