CVE-2023-5565

CVE-2023-5565 – The Shortcode Menu plugin for WordPress is vulnerable to stored XSS via the shortmenu shortcode in versions up to and including 3.2. The root cause is insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires an authenticated user with ...