CVE-2024-11825

CVE-2024-11825 affects the Broadstreet WordPress plugin. It is a Stored Cross-Site Scripting vulnerability in the zone parameter, present in all versions up to 1.50.3. Exploitation requires authenticated access at Contributor level or higher, enabling the attacker to inject arbitrary scripts that...