CVE-2023-2503

CVE-2023-2503 affects the 10Web Social Post Feed WordPress plugin (pre-1.2.9). Root cause: the plugin does not sanitize/escape certain parameters before output, enabling a Reflected XSS under admin contexts. Impact per sources: MEDIUM (CVSS 3.1 base 6.1). Remediation: upgrade to plugin version 1....