CVE-2024-11411

The Spotlightr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotlightr-v' shortcode in all versions up to, and including, 0.1.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-11411

creationtimestamp| type| source ---|---|--- 2024-12-20 07:05:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683880039836247 2024-12-20 07:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptopqajy2z 2024-12-20 09:13:22+00:00| seen|...