CVE-2023-5940

CVE-2023-5940 affects the WP Not Login Hide (WPNLH) WordPress plugin up to version 1.0. The issue is stored XSS in the plugin settings: an admin (high privilege) could inject payloads via the WPNLH Settings warning message field, potentially triggering stored XSS for authenticated users (includin...