Description
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Steven Henty Drop Shadow Boxes plugin <= 1.7.10 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Steven Henty | Drop Shadow Boxes | ≤ 1.7.10 | — |
Medium · 6.5
CVE-2023-23833
EUVD-2023-27919GHSA-xhvp-6rv7-fw9x
WordPress Drop Shadow Boxes Plugin <= 1.7.10 is vulnerable to Cross Site Scripting (XSS)
Published Jul 25, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack