CVE-2024-7918

The CVE-2024-7918 entry concerns the Pocket Widget WordPress plugin (versions up to 0.1.3). Connected sources confirm the underlying issue: the plugin does not sanitise or escape certain settings, enabling Stored Cross-Site Scripting (XSS) by high-privilege users (e.g., administrators) even when ...