Security Advisory

CVE-2023-2964

5.4
MEDIUM

Vulnerability Description

The Simple Iframe WordPress plugin before 1.2.0 does not properly validate one of its WordPress block attribute's content, which may allow users whose role is at least that of a contributor to conduct Stored Cross-Site Scripting attacks.
Published Date July 10, 2023
Official Source NIST NVD Advisory