Input validation vulnerability in Amazonify 0.8.1

The Amazonify plugin for WordPress, up to version 0.8.1, is vulnerable to something called “Stored Cross-Site Scripting” which is a type of cyber attack. This vulnerability affects multi-site WordPress installations and those which have disabled a security setting known as “unfiltered_html”. This attack makes it possible for someone with administrator-level permissions on the WordPress site to inject malicious web scripts into pages. When a user accesses one of these injected pages, the malicious script will be executed. This vulnerability can be used in combination with another vulnerability called CVE-2023-5818 to do something called “CSRF to XSS”.