CVE-2024-4756

The WP Backpack WordPress plugin (versions through 2.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to properly sanitize and escape certain settings. This flaw allows high-privilege users, such as administrators, to execute XSS attacks, even in environments where the unfi...