CVE-2023-0076

CVE-2023-0076 affects the WordPress plugin “Download Attachments” prior to version 1.3. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before rendering them in posts, which can enable Stored XSS by users with the contributor role or higher. P...