TI-2024-08681 CVE-2024-9357 · GHSA-xhf8-72p3-4cc7
xili-tidy-tags <= 1.12.04 - Reflected Cross-Site Scripting
Priority LOW 27
The xili-tidy-tags plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 1.12.04 due to insufficient input sanitization and output escaping.