CVE-2023-5605

The URL Shortify WordPress plugin before 1.7.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-5605

CVE-2023-5605 affects the WordPress plugin URL Shortify prior to version 1.7.9.1. The issue is due to insufficient sanitization/escaping of certain plugin settings, enabling Stored Cross-Site Scripting (XSS) by high-privilege users (e.g., admins), including in multisite setups where unfiltered_ht...