CVE-2023-2812

The CVE-2023-2812 entry concerns the WordPress plugin Ultimate Dashboard, versions prior to 3.7.6. The vulnerability arises because certain settings are not properly sanitized or escaped, which can enable Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (s...