TI-2023-05251 CVE-2023-5708 · GHSA-rw2v-7gvm-m375WP Post Columns <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodePriority LOW 29The WP Post Columns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'column' shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escapi…CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00485 · Published 2023-11-22 · No fix listed CWE-79