CVE-2024-12873

The Custom Field Manager WordPress plugin (version 1.0 and below) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to sanitise and escape a parameter before outputting it back to the page. This flaw allows an attacker to execute scripts in the browsers of high...