CVE-2023-0419

CVE-2023-0419 concerns the WordPress plugin “Shortcode for Font Awesome” prior to version 1.4.1. The vulnerability arises because the shortcode attributes are not properly validated or escaped before being echoed into pages/posts, enabling a stored XSS condition for users with the contributor rol...