TI-2023-25952 CVE-2023-47844 · GHSA-h95x-2qjf-cxgfWordPress Grab & Save Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)Priority LOW 32Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lim Kai Yang Grab & Save allows Reflected XSS.This issue affects Grab & Save: from n/a through 1.0.4.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00434 · Published 2023-11-30 · No fix listed CWE-79