CVE-2023-0173

The CVE-2023-0173 entry concerns the WordPress plugin WPFunnels . Versions earlier than 2.6.9 do not validate or escape certain shortcode attributes when output, enabling Stored XSS for users with the contributor role and above. Affected component is the plugin shortcode handling in WordPress pag...