CVE-2023-4838

The CVE-2023-4838 entry concerns the WordPress Simple Download Counter plugin. Affected: versions up to and including 1.6. Root cause: insufficient input sanitization and output escaping on shortcode attributes (e.g., before and after). Impact: stored cross-site scripting that authenticated users...