CVE-2023-0526

The CVE-2023-0526 entry applies to the WordPress plugin Post Shortcode, affecting versions up to 2.0.9. The root cause is that the plugin does not validate and escape certain shortcode attributes before output, enabling Stored Cross‑Site Scripting by users with the contributor role or higher when...