CVE-2024-13328

The Giga Messenger (and Giga Messenger Bots ) WordPress plugin, in versions 2.3.1 and earlier , is vulnerable to a Reflected Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape a parameter before it is outputted back to the page. An attacker can exploi...