CVE-2023-22718

The CVE-2023-22718 entry describes a Reflected XSS in the WordPress plugin User Meta Manager (versions <= 3.4.9). The underlying issue is insufficient sanitisation/escaping of user-controlled input, leading to reflected payloads in the admin/page context. Affected product/component: WordPress ...