CVE-2024-13441

CVE-2024-13441 affects the WordPress plugin Bilingual Linker, with Stored Cross-Site Scripting via the bl_otherlang_link_1 parameter in all versions up to 2.4. Authenticated attackers with Contributor-level access and above can inject scripts that execute for users visiting injected pages. Public...