CVE-2023-0366

The CVE-2023-0366 entry concerns the Loan Comparison WordPress plugin (versions prior to 1.5.3). The issue is that the plugin does not validate and escape some shortcode attributes before outputting them in a post/page, enabling Stored XSS when a user with the contributor role or higher renders t...