CVE-2023-2029

CVE-2023-2029 concerns the PrePost SEO WordPress plugin (versions <= 3.0). The vulnerability is a Stored Cross-Site Scripting (XSS) flaw caused by improper sanitization of certain settings, enabling high-privilege users to inject script even when unfiltered_html is disallowed (e.g., multisite)...