TI-2024-04595 CVE-2024-4942 · GHSA-9p45-vf85-gjxgCustom Dash <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site ScriptingPriority LOW 22The Custom Dash plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00263 · Published 2024-06-06 · No fix listed CWE-79