CVE-2023-23687

The CVE-2023-23687 entry concerns the WordPress Youtube shortcode plugin, affected versions ≤ 1.8.5, with an Authenticated Stored Cross-Site Scripting (XSS) vulnerability. The vulnerability stems from the plugin’s handling of input in the YouTube shortcode, enabling stored XSS when an authenticat...