CVE-2024-5002

The User Submitted Posts WordPress plugin, in versions prior to 20240516 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS atta...