CVE-2023-38516

CVE-2023-38516 is a stored Cross-Site Scripting (XSS) vulnerability in the WordPress WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate plugin versions <= 1.2.2. The root cause is a stored XSS in the plugin that can be triggered by an attacker with Contributor+ permissions....