TI-2024-08240 CVE-2024-8874 · GHSA-hprx-hx7j-hf8v
AJAX Login and Registration modal popup + inline form <= 2.24 - Reflected Cross-Site Scripting
Priority LOW 28
The AJAX Login and Registration modal popup + inline form plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to…