cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2023-5109,https://securityvulnerability.io/vulnerability/CVE-2023-5109,Stored Cross-Site Scripting Vulnerability in WP Mailto Links Plugin for WordPress,"The WP Mailto Links plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate validation of user inputs in the 'wpml_mailto' shortcode. This vulnerability allows authenticated attackers with contributor-level access or higher to introduce and execute arbitrary scripts in web pages viewed by users. The issue has been addressed partially in version 3.1.3 and completely resolved in version 3.1.4, reinforcing the importance of timely updates to protect against potential exploitation.",Wordpress,WP Mailto Links – Protect Email Addresses,5.4,MEDIUM,0.0005200000014156103,false,,false,false,false,,false,false,2023-10-20T08:15:00.000Z,0