WordPress · Ziteboard Online Whiteboard · CVE-2023-5076
**Name of the Vulnerable Software and Affected Versions**
Ziteboard Online Whiteboard plugin for WordPress versions up to, and including, 2.9.9
**Description**
The issue arises from insufficient input sanitization and output escaping in the `ziteboard` shortcode, allowing authenticated attackers with contributor-level access and above to inject arbitrary web scripts in pages. This enables the execution of injected scripts whenever a user accesses an injected page.
**Recommendations**
For Ziteboard Online Whiteboard plugin for WordPress versions up to, and including, 2.9.9, update to a version that addresses the insufficient input sanitization and output escaping in the `ziteboard` shortcode.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.