CVE-2024-13603

The Wise Forms WordPress plugin, affecting versions through 1.2.0 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows unauthenticated users to perform attacks by submitting malicious forms. ...