CVE-2023-0212

CVE-2023-0212 affects the Advanced Recent Posts WordPress plugin (versions 0.6.14 and earlier). The issue is that certain shortcode attributes are not validated or escaped before being output in posts/pages, enabling stored XSS if a user with contributor privileges or higher views the page. The v...