CVE-2023-4963

The CVE 2023-4963 entry covers the WS Facebook Like Box Widget for WordPress. A Stored XSS exists in the ws-facebook-likebox shortcode for versions up to and including 5.0 due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers w...