CVE-2023-3746 (published 2023-10-16T19:39:14.930Z)
The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks
Affected products: Vendor: Unknown
Product: ActivityPub
Versions: 0