CVE-2024-3827

The CVE-2024-3827 entry concerns the Spectra Pro WordPress plugin. A stored XSS flaw exists in all versions up to and including 1.1.4 due to insufficient input sanitization and output escaping on user-supplied block IDs/attributes. Exploitation requires at least contributor-level authentication a...