CVE-2023-6809

CVE-2023-6809 concerns the WordPress plugin Custom fields shortcode. A stored cross-site scripting vulnerability exists in the cf shortcode that processes user-supplied post meta values. In all versions up to and including 0.1, insufficient input sanitization and output escaping allows an authent...