CVE-2023-1090

CVE-2023-1090 affects the WordPress plugin SMTP Mailing Queue, where versions before 2.0.1 fail to sanitize/escape certain settings, enabling stored XSS by high-privilege users (e.g., admin) even if unfiltered_html is disallowed (multisite). Impact is described as Stored XSS with potential user i...