CVE-2024-5002

The CVE-2024-5002 entry concerns the WordPress plugin User Submitted Posts (versions before 20240516). The underlying issue is that the plugin does not sanitize and escape certain settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., administrators), even when unfiltered_h...