TI-2023-00846 CVE-2023-0894 · GHSA-cppv-3jg2-22cm
Pickup | Delivery | Dine-in date time <= 1.0.9 - Admin+ Stored XSS
Priority MEDIUM 55
The Pickup | Delivery | Dine-in date time WordPress plugin through 1.0.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting atta…