WP Review Slider, CVE-2023-6456

CVE, Research URL: CVE-2023-6456
Home page URL: Security reports for WP Review Slider
Application: WP Review Slider
Published on: Jan 23, 2024
Research Description: The WP Review Slider WordPress plugin before 13.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected versions: max 13.0.
Status: vulnerable