CVE-2023-6991

CVE-2023-6991 relates to the WordPress plugin “JSM file_get_contents() Shortcode” (before 2.7.1). The vulnerability arises because one shortcode parameter is not validated before making an outbound request, enabling users with a contributor role or higher to trigger server-side requests (SSRF). A...