CVE-2023-4858

CVE-2023-4858 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Simple Table Manager WordPress plugin up to version 1.5.6. This flaw allows high-privilege users, such as administrators, to inject malicious scripts due to insufficient sanitization of plugin settings, even in environments where unfiltered_html is restricted. The vulnerability has a CVSS score of 4.8 (Medium), indicating a network-based attack requiring high privileges and user interaction, with potential for low impact on confidentiality and integrity. Its low EPSS and FAUCET Risk Score suggest a relatively low overall risk. There is no evidence of active exploitation, nor are there known public exploits available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, further indicating a low level of current attention or exploitation.