Security Advisory
CVE-2024-4483
5.4
MEDIUM
Vulnerability Description
The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting
Published Date
July 29, 2024
Official Source
NIST NVD Advisory