CVE-2024-13588

CVE-2024-13588: The WordPress Simplebooklet PDF Viewer and Embedder plugin (versions up to 1.1.0; patched in ≤1.1.2) is vulnerable to stored XSS via the simplebooklet shortcode due to insufficient input sanitization and output escaping. Exploitation requires authenticated access (Contributor+) to...