CVE-2024-1401

The Profile Box Shortcode And Widget WordPress plugin versions prior to 1.2.1 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of certain plugin settings, which allows high-privilege users, such as administrators, to execute malicio...