CVE-2023-23728

CVE-2023-23728 affects WordPress WP Flipclock plugin up to version 1.7.4. The root cause is insufficient sanitization/escaping in parameters, enabling a stored XSS that can be triggered by users with Contributor privileges (and higher). Remediation: update to version 1.8 or apply vendor fixes. Ex...