PT-2024-39888

Name of the Vulnerable Software and Affected Versions LSX Tour Operator plugin for WordPress versions up to, and including, 1.4.9 Description The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows...