CVE-2024-9435

CVE-2024-9435 refers to the ShiftController Employee Shift Scheduling WordPress plugin. Affected versions up to and including 4.9.66 are vulnerable to a reflected Cross-Site Scripting (XSS) via URL keys due to insufficient input sanitization and output escaping. The vulnerability can be exploited...