TI-2024-04774 CVE-2024-5141 · GHSA-f5f7-2gvp-276pCross-site scripting in mpntod Rotating TweetsPriority LOW 28The Rotating Tweets (Twitter widget and shortcode) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's' 'rotatingtweets' in all versions up to, and including, 1.9.10 due to insufficient inp…CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00257 · Published 2024-06-06 · No fix listed CWE-79