CVE-2024-0719

The Tabs Shortcode and Widget WordPress plugin, affecting versions 1.17 and earlier , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to adequately validate or escape certain shortcode attributes before they are outputted back in a page or post where the shortco...