CVE-2023-46640

This vulnerability allows an attacker with contributor-level access or higher to inject malicious scripts into the Medialist plugin, which can then be executed in the browsers of users who view the affected content. This means that if an attacker can log in as a contributor or more privileged user, they can potentially steal sensitive information or perform actions on behalf of other users.