CVE-2023-3170

The tagDiv Composer plugin before version 4.2 contains a cross-site scripting vulnerability that was discovered by Truoc Phan. An attacker could exploit this flaw to inject malicious scripts into a website, potentially including redirects, advertisements, or other HTML content that would execute when visitors access the site. The vulnerability has been patched in version 4.2 and users should update their installations to this version or later.

Based on public CVE data (MITRE/NVD).