CVE-2024-10818

The JSFiddle Shortcode WordPress plugin versions prior to 1.1.3 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to validate and escape certain shortcode attributes before they are outputted in a page or post where the shortcode is embedded. This vulnerability al...