CVE-2023-2899

CVE-2023-2899 affects Google Map Shortcode WordPress plugin up to version 3.1.2. It allows Stored XSS by not validating/escaping certain shortcode attributes output back to the page, enabling attacks against admin/high-privilege users via low-privilege (Contributor+) accounts. Public details conf...