CVE-2024-6693

The wccp-pro WordPress plugin (versions prior to 15.3 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This allows high-privilege users, such as administrators, to perform XSS attacks, even in environment...