TI-2024-10366 CVE-2024-11192 · GHSA-w495-f8hj-9gqr
Cross-site scripting in jonkastonka Sp*tify Play Button for WordPress
Priority LOW 29
The Spotify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's spotifyplaybutton shortcode in all versions up to, and including, 2.11 due to insufficient input sa…