CVE-2024-11896 Text Prompter – Unlimited chatgpt text prompts for openai tasks <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Text Prompter – Unlimited chatgpt text prompts for openai tasks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'textprompter' shortcode in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping on user supplied...

CVE-2024-11896

CVE-2024-11896: The Text Prompter – Unlimited chatgpt text prompts for openai tasks WordPress plugin contains a stored XSS flaw in the text_prompter shortcode (all versions up to 1.0.7). An authenticated attacker with contributor-level access can inject scripts into pages, which will execute for ...