CVE-2024-9350

CVE-2024-9350 (DPD Baltic Shipping, WordPress) Reflected Cross-Site Scripting via the search_value parameter in all versions up to and including 1.2.83. Root cause: insufficient input sanitization and output escaping. Impact: unauthenticated attackers can inject scripts into pages that execute if...