CVE-2023-28174

CVE-2023-28174 : Stored XSS in the WordPress plugin eRocket (eLightUp) up to version 1.2.4. Exploitation requires admin-level privileges. Root cause is a stored XSS in eRocket’s admin-exposed context. Version 1.2.5 fixes the issue. Remediation: upgrade to 1.2.5 or later; PatchStack confirms fixed...