CVE-2023-49747

Name of the Vulnerable Software and Affected Versions WebFactory Ltd Guest Author versions n/a through 2.3

Description The issue is related to improper neutralization of input during web page generation, which allows stored cross-site scripting (XSS). This means an attacker can inject malicious scripts into the website, potentially affecting users who access the compromised page.

Recommendations For versions n/a through 2.3, update to a version later than 2.3 to resolve the issue. As a temporary workaround, consider restricting user input to minimize the risk of exploitation. Avoid using potentially vulnerable features in the Guest Author plugin until the issue is resolved.