CVE-2024-8052

CVE-2024-8052 affects the Review Ratings WordPress plugin (versions ≤ 1.6). The vulnerability enables a Stored XSS via a CSRF flaw caused by missing CSRF checks and insufficient sanitisation/escaping in multiple areas. If a logged-in admin user performs actions triggering these endpoints, an atta...