CVE-2024-6487

CVE-2024-6487 affects the Inline Related Posts WordPress plugin prior to 3.8.0. The issue is due to insufficient sanitization/escaping of plugin settings, which could allow high-privilege users (e.g., Administrators) to perform Stored XSS, including scenarios where unfiltered_html is disallowed (...