Molongui · Molongui Author Box · CVE-2023-39921
**Name of the Vulnerable Software and Affected Versions**
Molongui Author Box, Guest Author and Co-Authors for Your Posts – Molongui versions through 4.6.19
**Description**
The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting (XSS). This means that an attacker can inject malicious scripts into the website, potentially affecting users who visit the compromised page.
**Recommendations**
For versions through 4.6.19, update to a version later than 4.6.19 to resolve the issue.
As a temporary workaround, consider restricting user input to prevent malicious script injection until a patch is available.