CVE-2024-10815

The PostLists WordPress plugin (versions through 2.0.2 ) contains a vulnerability where the ** extdollar_SERVER['REQUEST_URI']** parameter is not properly escaped before being outputted as an attribute. This flaw can lead to Reflected Cross-Site Scripting (XSS) , particularly in older web browser...