CVE-2023-40206

The WP 404 Auto Redirect to Similar Post plugin through version 1.0.3 contains a stored cross-site scripting vulnerability in its administrative settings caused by inadequate sanitization of user input and lack of proper output encoding. Attackers with administrator privileges or higher can inject malicious scripts into pages, which will then execute when other users visit those pages. This vulnerability only affects multisite WordPress installations or sites where the unfiltered_html capability has been restricted.

Based on public CVE data (MITRE/NVD).