TI-2023-09764 CVE-2023-23977 · GHSA-j42c-438f-8rrxWordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)Priority LOW 29Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Team Heateor WordPress Social Comments Plugin for Vkontakte Comments and Disqus Comments plugin <= 1.6.1 versions.CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00383 · Published 2023-04-04 · No fix listed CWE-79