CVE-2024-9023

The WP-WebAuthn plugin for WordPress (WP-WebAuthn) is vulnerable to Stored Cross-Site Scripting via the wpa_login_form shortcode (noted as wwa_login_form) in all versions up to 1.3.1 due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contribu...