CVE-2024-1846

CVE-2024-1846 affects the WordPress plugin “Responsive Tabs” (versions before 4.0.7). The issue is a lack of validation/escaping of shortcode attributes, leading to Stored XSS when the shortcode is rendered in a post/page. The root cause is improper handling of attributes in the plugin’s output. ...

CVE-2024-4096

CVE-2024-4096 affects the WordPress plugin Responsive Tabs (versions up to 4.0.8). The vulnerability is aStored Cross-Site Scripting (XSS) caused by insufficient sanitization/escaping of certain Tab settings, potentially enabling a high-privilege user (Contributor+) to inject scripts. Public deta...