CVE-2024-13874

The Feedify - Web Push Notifications WordPress plugin is vulnerable to Reflected Cross-Site Scripting (XSS) in versions prior to 2.4.6 . The root cause is the failure to properly sanitize and escape a parameter before outputting it back to the page. An attacker could exploit this to target high-p...