CVE-2024-0688

The CVE-2024-0688 entry concerns the WebSub (PubSubHubbub) WordPress plugin. Affected versions: all up to and including 3.1.4. Root cause: insufficient input sanitization and output escaping in plugin settings, enabling Stored Cross-Site Scripting. Impact: authenticated attackers with administrat...