CVE-2024-11365

CVE-2024-11365 affects the WordPress plugin Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes . The vulnerability is a Reflected Cross-Site Scripting (XSS) due to unsafe use of the URL-building function add_query_arg without proper escaping, in versions up to and including 1.1.6. This enab...