CVE-2023-23722

CVE-2023-23722 affects the WordPress WP eBay Product Feeds plugin up to version 3.3.1. The flaw is an admin+ Stored XSS due to insufficient sanitisation/escaping of settings, exploitable by high-privilege administrators (requires user interaction). PatchStack and WPVulnDB confirm a fix in version...