CVE-2024-8919

The Confetti Fall Animation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the confetti-fall-animation shortcode in versions up to and including 1.3.0 due to insufficient input sanitization and output escaping. Exploitation requires an authenticated attacker with contributo...