CVE-2024-13225

The ECT Home Page Products WordPress plugin (versions 1.9 and earlier ) is vulnerable to Reflected Cross-Site Scripting (XSS) due to a lack of proper sanitization and escaping of a parameter before it is outputted back to the page. An attacker could exploit this by tricking a victim, such as an a...