CVE-2024-10112

CVE-2024-10112 involves the WordPress plugin Simple News (vulnerable through the news shortcode) and is a stored XSS due to insufficient input sanitization and output escaping on user-supplied attributes. The vulnerability affects all versions up to and including 2.8. Exploitation requires an aut...