TI-2024-08764 CVE-2024-9445 · GHSA-3879-q6vj-r6vqCross-site scripting in acekyd Display Medium PostsPriority LOW 28The Display Medium Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_medium_posts shortcode in all versions up to, and including, 5.0.1 due to insufficient input sanitizatio…CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2024-10-04 · No fix listed CWE-79