CVE-2024-3048

The Bannerlid WordPress plugin (version 1.1.0 and earlier) is vulnerable to Reflected Cross-Site Scripting (XSS) because it fails to escape generated URLs before outputting them into attributes. This security flaw could be leveraged to target high-privilege users, such as administrators . Remedia...