CVE-2024-13222

The CVE-2024-13222 case concerns the WordPress User Messages plugin (versions up to 1.2.4). The issue is a reflected XSS caused by insufficient sanitization/escaping of a parameter before it is output on the page. Impact is described as enabling the attacker to run scripts in the context of high-...