CVE-2023-2028

Name of the Vulnerable Software and Affected Versions Call Now Accessibility Button WordPress plugin versions prior to 1.1

Description The issue allows high-privilege users to perform Stored Cross-Site Scripting (XSS) attacks due to improper sanitization of some settings. This can occur even when the unfiltered html capability is disallowed, such as in a multisite setup.

Recommendations For versions prior to 1.1, update to version 1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the plugin's settings to minimize the risk of exploitation.