TI-2024-09316 CVE-2024-10038 · GHSA-5w7w-x467-8495
WP-Strava <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Priority LOW 27
The WP-Strava plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.12.1 due to insufficient input sanitization and output escaping.