CVE-2024-5141

CVE-2024-5141 – Rotating Tweets (Twitter widget and shortcode) for WordPress is vulnerable to Stored Cross‑Site Scripting in all versions up to 1.9.10 due to insufficient input sanitization and output escaping on user‑supplied attributes. This allows authenticated attackers with contributor‑level...