CVE-2023-6783

The WolfNet IDX for WordPress plugin (versions 1.19.1 and earlier ) contains a Stored Cross-Site Scripting (XSS) vulnerability. The flaw arises because the plugin fails to properly sanitise and escape certain settings, allowing high-privilege users, such as administrators, to perform XSS attacks....