CVE-2023-5057 Information

Description

The ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions which could allow users with a role of Contributor and above to perform Stored XSS attacks

Reference

https://wpscan.com/vulnerability/58a63507-f0fd-46f1-a80c-6b1c41dddcf5