CVE-2024-13669

CVE-2024-13669 concerns the CalendApp WordPress plugin (versions up to 1.1). The issue is a Reflected XSS caused by insufficient sanitization/escaping of a user-supplied parameter that is output back in a page, enabling exploitation by an attacker against high-privilege users (e.g., admins). Publ...