The Website Content in Page or Post WordPress plugin before 2024.04.09 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could al…
CVSS 3.1MEDIUM 6.5·Network·Low privileges·User interaction·EPSS 0.00312·Published 2024-07-12·Fixed in 2024.04.09CWE-79