CVE-2023-7069

The CVE concerns the WordPress plugin Advanced iFrame (<= 2023.10). The vulnerability is a Stored Cross-Site Scripting (XSS) caused by improper input sanitization and output escaping in the plugin’s advanced_iframe shortcode, enabling authenticated contributors (or higher) to inject scripts on...

WordPress Advanced iFrame Plugin <= 2023.10 is vulnerable to Cross Site Scripting (XSS)

Software Advanced iFrame Type Plugin Vulnerable versions = 2023.10 Fixed in 2024.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-7069 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID a79bcd48a9fe Credits Webbernaut Required...