CVE-2024-2130

CVE-2024-2130 affects the CWW Companion WordPress plugin. It is a Stored XSS via the Module2 widget in versions up to 1.2.7 caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires contributor-level or higher authentication and can inject sc...