CVE-2024-0719

The Tabs Shortcode and Widget WordPress plugin, in versions through 1.17 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly validate and escape certain shortcode attributes before they are rendered on a page or post. This flaw could allow users with c...