CVE-2023-4290 (published 2023-10-16T19:22:43.516Z)
The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected Cross-Site Scripting issues which could be used against high privilege users such as admin
Affected products: Vendor: Unknown
Product: WP Matterport Shortcode
Versions: 0