CVE-2023-0893

The CVE-2023-0893 issue affects the Time Sheets WordPress plugin prior to 1.29.3, where the plugin did not fully sanitise/escape certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (including multisite). Public sources across Red Ha...