CVE-2024-0974

CVE-2024-0974 affects the Social Media Widget WordPress plugin prior to 4.0.9. The issue is Stored XSS caused by insufficient sanitization/escaping of settings, enabling high-privilege users (e.g., admins) to inject scripts, even when unfiltered_html is disallowed (e.g., multisite). Remediation: ...