CVE-2023-25787

CVE-2023-25787 affects the WordPress plugin WP资源下载管理 (Download Info Page) versions ≤ 1.3.9. It enables an authenticated administrator (admin+) to perform a Stored Cross-Site Scripting (XSS) attack due to insufficient sanitisation/escaping of certain settings within the plugin. The issue is rooted...