CVE-2024-37460

CVE-2024-37460 is a Stored XSS in the WordPress plugin “SuperSaaS – online appointment scheduling” (vulnerable range: from n/a through 2.1.9). The root cause is Improper Neutralization of Input During Web Page Generation, allowing injected scripts to be stored and potentially executed in pages ge...