CVE-2023-4962

CVE-2023-4962 affects the Video PopUp WordPress plugin (video-popup) up to version 1.1.3. Description: stored XSS via the video_popup shortcode due to insufficient input sanitization/output escaping; authenticated attackers with contributor+ can inject scripts that run for users on affected pages...