CVE-2024-10309

The Tracking Code Manager WordPress plugin, in versions prior to 2.4.0 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape certain metabox settings when they are outputted on a page. This flaw allows users with privileges as low as Contribut...

CVE-2024-6335

The Tracking Code Manager WordPress plugin (versions prior to 2.3.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the insufficient sanitization and escaping of certain settings, which allows high-privilege users, such as administrators, to execute XSS attacks. This vuln...