CVE-2024-8804

CVE-2024-8804 affects the WordPress Code Embed plugin, with a stored XSS in the plugin’s script embed feature that affects all versions up to 2.4. An attacker with contributor-level access or higher can inject arbitrary scripts that execute when users load the affected pages. The vulnerability is...