CVE-2023-5231

CVE-2023-5231 describes a stored XSS in the WordPress plugin Magic Action Box due to insufficient sanitization of shortcode attributes. Affected versions are those up to and including 2.17.2. The vulnerability can be exploited by authenticated attackers with contributor-level permissions or highe...