CVE-2024-8737

The WordPress PDF Thumbnail Generator plugin is affected by CVE-2024-8737: Reflected Cross-Site Scripting caused by insufficient escaping of URL parameters via add_query_arg in versions up to 1.3. Unauthenticated attackers could inject scripts in pages executed when users click a crafted link. Th...