CVE-2024-1348

The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including, 2.15.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-1348

CVE-2024-1348 concerns the WordPress plugin Shortcodes and extra features for Phlox theme (auxin-elements) with Stored Cross-Site Scripting via the custom JS parameter. The vulnerability arises from insufficient input sanitization and output escaping. Affected versions include all up to 2.15.5 (p...