CVE-2024-9458

CVE-2024-9458 concerns the Reservit Hotel WordPress plugin, affected versions prior to 3.0. The root cause is failure to adequately sanitize and escape certain settings, which can permit stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, including multisite...