CVE-2023-46642

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in sahumedia SAHU TikTok Pixel for E-Commerce plugin = 1.2.2 versions...

CVE-2023-46642

CVE-2023-46642 affects the SAHU TikTok Pixel for E-Commerce WordPress plugin up to version 1.2.2. The issue is a stored Cross-Site Scripting (XSS) vulnerability that requires an authenticated admin-level (admin+) user to trigger. Root cause is insufficient input sanitization/output escaping in th...