CVE-2024-8090

CVE-2024-8090 affects the WordPress plugin JavaScript Logic (versions 0.1 and earlier). The vulnerability stems from missing CSRF checks, insufficient input sanitisation, and escaping in several areas, which could allow a logged-in administrator to introduce stored XSS payloads via a CSRF attack....