CVE-2024-11266

The Geocache Stat Bar Widget WordPress plugin (versions 0.911 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to execute XSS att...