CVE-2024-10639

The Auto Prune Posts WordPress plugin versions prior to 3.0.0 is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain plugin settings. This vulnerability can be exploited by high-privilege users, such as administrators, ev...