CVE-2024-0381: Improper Neutralization of Input During Web Page Generation

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the use of the 'tag' attribute in the wprm-recipe-name, wprm-recipe-date, and wprm-recipe-counter shortcodes in all versions up to, and including, 9.1.0. This makes it possible for authenticated attackers wi...

PT-2024-15515

Name of the Vulnerable Software and Affected Versions WP Recipe Maker plugin for WordPress versions up to, and including, 9.1.0 Description The issue is related to Stored Cross-Site Scripting via the use of the tag attribute in the "wprm-recipe-name", "wprm-recipe-date", and "wprm-recipe-counter"...