CVE-2024-13357

The Ditty WordPress plugin, in versions prior to 3.1.52 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as authors , to perform XSS attacks, even in environmen...