CVE-2023-2654

CVE-2023-2654 concerns the Conditional Menus WordPress plugin prior to version 1.2.1. It allows a Reflected Cross-Site Scripting (XSS) due to not escaping a parameter before outputting it back in an HTML attribute. The description notes this could be exploited against high-privilege users such as...