CVE-2024-5966

The CVE-2024-5966 entry concerns the Grey Opaque WordPress theme. It is vulnerable to Stored Cross-Site Scripting via the url parameter in the theme’s Download-Button shortcode, affecting all versions up to and including 2.0.1. The issue arises from insufficient input sanitization and output esca...