TI-2024-10929 CVE-2024-11785 · GHSA-q89q-rwqp-rx7h
Integrate Firebase <= 0.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Integrate Firebase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'firebase_show' shortcode in all versions up to, and including, 0.9.3 due to insufficient input sanitization and o…