Vulnerability — CVE-2023-5057

CVE-2023-5057

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-5057
Description:: The ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions, which could allow users with a role of Contributor and above to perform Stored XSS attacks
Last updated date:: 10/20/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 10/20/2023
Reference url to background: https://wpscan.com/vulnerability/58a63507-f0fd-46f1-a80c-6b1c41dddcf5