CVE-2023-0143

The CVE-2023-0143 entry affects the WordPress plugin Send PDF for Contact Form 7, pre-0.9.9.2. The issue is that certain shortcode attributes are not validated/escaped before being output, enabling Stored XSS by users with as little as the Contributor role and targeting higher-privilege admins. T...