WordPress Ajax Load More Plugin <= 7.1.1 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Load More Type Plugin Vulnerable versions = 7.1.1 Fixed in 7.1.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4711 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 049ac1eade10 Credits Webbernaut Required...

CVE-2024-4711

CVE-2024-4711 affects the WordPress plugin WordPress Infinite Scroll – Ajax Load More. The vulnerability is a Stored Cross-Site Scripting (XSS) in the ajax_load_more shortcode, due to insufficient input sanitization and output escaping, exploitable by authenticated users with contributor-level pe...