CVE-2024-11902: Improper Neutralization of Input During Web Page Generation

The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode in all versions up to, and including, 4.2.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

PT-2024-17335 · WordPress · Slope Widgets

Name of the Vulnerable Software and Affected Versions: Slope Widgets plugin for WordPress versions up to, and including, 4.2.11 Description: The Slope Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slope-reservations' shortcode due to insufficient inpu...