CVE-2024-12522

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdiiplye2g 2025-02-19 08:41:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4796 2025-02-19 15:39:51+00:00| seen|...

CVE-2024-12522

The Yay! Forms | Embed Custom Forms, Surveys, and Quizzes Easily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'yayforms' shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied...