NA

CVE-2024-2444

Published: 06/04/2024 Updated: 08/04/2024

Vulnerability Summary

The Inline Related Posts WordPress plugin prior to 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed