CVE-2023-32576 – WordPress Locatoraid Store Locator Plugin <= 3.9.18 is vulnerable to Cross Site Scripting (XSS)

https://notcve.org/view.php?id=CVE-2023-32576

11 May 2023 — Auth. (subscriber+) Stored Cross-Site Scripting') vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.18 versions. Vulnerabilidad de Cross-Site Scripting (XSS) Reflejada en el plugin Locatoraid Store Locator de Plainware que afecta a las versiones 3.9.18 e inferiores. Para explotar esta vulnerabilidad hace falta estar autenticado y tener permisos de suscriptor o superior. The Locatoraid Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and inclu... • https://patchstack.com/database/vulnerability/locatoraid/wordpress-locatoraid-store-locator-plugin-3-9-18-cross-site-scripting-xss-vulnerability?_s_id=cve • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •