PT-2024-28702 · WordPress · Sportspress

Name of the Vulnerable Software and Affected Versions: SportsPress WordPress plugin versions prior to 2.7.22 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for example in...