CVE-2023-34173

Name of the Vulnerable Software and Affected Versions Alexander Semikashev Yandex Metrica Counter plugin versions <= 1.4.3

Description The issue is related to a Stored Cross-Site Scripting (XSS) vulnerability that affects the Alexander Semikashev Yandex Metrica Counter plugin. This vulnerability requires authentication with admin+ privileges.

Recommendations For Alexander Semikashev Yandex Metrica Counter plugin versions <= 1.4.3, update to a version higher than 1.4.3 to resolve the issue. As a temporary workaround, consider restricting access to the plugin's administrative interface to minimize the risk of exploitation.