CVE-2024-9836

The RSS Feed Widget WordPress plugin (versions prior to 3.0.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly validate and escape certain shortcode attributes before they are outputted in a page or post where the shortcode is embedded. This flaw coul...