WP 6.5 - 7.1.3 - Contributor+ Stored XSS via Interactivity API Style Directive Object Write

Description WordPress does not restrict the target of Interactivity API style directives to style objects in some cases, which could allow users with contributor-level access and above to perform Stored Cross-Site Scripting attacks that execute, without requiring a click, in the session of anyone...