CVE-2023-4888

CVE-2023-4888 affects the Simple Like Page Plugin for WordPress (v ≤ 1.5.1). It enables Stored Cross-Site Scripting via the sfp-page-plugin shortcode, allowing authenticated attackers with contributor-level permissions to inject scripts that execute in pages viewed by users. The advisory consolid...