CVE-2024-10939

The Image Widget WordPress plugin, in versions prior to 4.4.11 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape specific Image Widget settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks...