CVE-2023-0267

CVE-2023-0267 affects The Ultimate Carousel For WPBakery Page Builder WordPress plugin up to version 2.6. It stems from not validating/escaping certain shortcode attributes before they are output in a page/post, enabling Stored Cross-Site Scripting for users with the contributor role or higher. P...