CVE-2024-6335

CVE-2024-6335 affects the WordPress plugin Tracking Code Manager (versions before 2.3.0). The root cause is inadequate sanitization and escaping of certain settings, enabling stored cross-site scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, such as in mul...