CVE-2023-7070

CVE-2023-7070 affects the Email Encoder – Protect Email Addresses and Phone Numbers WordPress plugin. All versions up to and including 2.1.9 are vulnerable to Stored XSS via the eeb_mailto shortcode due to insufficient input sanitization and output escaping on user-supplied attributes, enabling a...