CVE-2024-11645

The float block WordPress plugin (versions 1.7 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) due to insufficient sanitization and escaping of certain settings. This flaw could allow high-privilege users, such as administrators, to execute XSS attacks, even in environments where...