CVE-2024-13633

The Simple catalogue WordPress plugin, affecting versions 1.0.0 through 1.0.2 , contains a Reflected Cross-Site Scripting (XSS) vulnerability. This issue arises because the plugin fails to properly sanitise and escape a parameter before outputting it back onto the page. An attacker could exploit ...