CVE-2024-3634

CVE-2024-3634 affects the WordPress plugin month name translation benaceur, prior to version 2.3.8. The issue arises from insufficient sanitization/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., Administrators), even when unfiltered_html is disallowed (e.g., mult...