CVE-2024-10818

CVE-2024-10818 affects the WordPress JSFiddle Shortcode plugin prior to version 1.1.3. The vulnerability arises because the plugin does not validate and escape some shortcode attributes before echoing them in pages/posts, enabling Stored XSS when a user with Contributor role or higher renders a s...