CVE-2024-13357

The Ditty WordPress plugin versions prior to 3.1.52 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This vulnerability allows high-privilege users, such as those with Author permissions, to execute stored ...