CVE-2024-13701

CVE-2024-13701 concerns the Liveticker (by stklcode) WordPress plugin. The vulnerability is a stored cross-site scripting (XSS) via the plugin’s liveticker shortcode, caused by insufficient input sanitization and output escaping on user-supplied attributes. Affected are all versions up to and inc...