Stored Cross-Site Scripting Vulnerability in WP Recipe Maker Plugin

CVE-2023-6958

What is CVE-2023-6958?

The WP Recipe Maker plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of user-supplied attributes in its shortcode(s). This vulnerability affects all versions up to and including 9.1.0, allowing authenticated attackers with contributor-level permissions or higher to inject malicious web scripts into pages. These scripts will execute for unsuspecting users accessing the altered pages, potentially compromising their security and privacy.

References