CVE-2023-6067

The CVE-2023-6067 entry concerns WP User Profile Avatar for WordPress, where versions ≤ 1.0.1 fail to validate/escape shortcode attributes, enabling Stored XSS for users with Contributor+ privileges. Red Hat and NVD entries confirm the vulnerability; the provided documents do not specify a fixed ...