CVE-2024-3710

The Image Photo Gallery Final Tiles Grid WordPress plugin, in versions prior to 3.6.0 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the plugin's failure to properly validate and escape certain shortcode attributes before outputting them back to the page. This flaw allow...