TI-2023-00170 CVE-2023-0176 · GHSA-fqww-44f8-q7w7
Giveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSS
Priority MEDIUM 58
The Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could…