CVE-2024-10151

The Auto iFrame WordPress plugin (versions prior to 2.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to properly validate and escape certain shortcode attributes before they are rendered on a page or post. This flaw allows users with contributor roles or higher to inject ...