TI-2024-10921 CVE-2024-11777 · GHSA-9x47-pg59-593c
Sell Media <= 2.5.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Sell Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sell_media_search_form_gutenberg' shortcode in all versions up to, and including, 2.5.8.5 due to insufficient input sanit…