CVE-2024-4602

CVE-2024-4602 affects the Embed Peertube Playlist WordPress plugin. The vulnerability exists in versions prior to 1.10 where certain plugin settings are not properly sanitised/escaped, enabling stored XSS by high-privilege users (e.g., admins), including scenarios where unfiltered_html is disable...