CVE-2024-13352

CVE-2024-13352 affects the Legull WordPress plugin (versions up to 1.2.2). The issue is a Reflected XSS caused by the plugin not sanitising and escaping a parameter before echoing it on the page, potentially impacting high-privilege users (e.g., admins). The Red Hat/NVD/CVE entries corroborate th...