PT-2024-11026

Name of the Vulnerable Software and Affected Versions ark-commenteditor WordPress plugin versions 2.15.6 and earlier Description The issue allows attackers to inject an iFrame into the page, enabling them to load arbitrary content from any page into the comment section. This is due to the plugin'...