CVE-2023-0379

The CVE-2023-0379 entry concerns the Spotlight Social Feeds WordPress plugin (pre-1.4.3). The issue is that certain block options are not validated or escaped before being re-output in pages where the block is embedded, enabling Stored Cross-Site Scripting by users with contributor privileges or ...