CVE-2023-6884

CVE-2023-6884 affects the WordPress Plugin for Google Reviews (widget-google-reviews) up to version 3.1. Root cause: insufficient input sanitization and output escaping on the place_id attribute used by the shortcode, enabling Stored Cross-Site Scripting. Impact: authenticated users with contribu...