TI-2024-04110 CVE-2024-4419Fetch JFT <= 1.8.3 - Authenticated (Administrator+) Stored Cross-Site ScriptingPriority LOW 20The Fetch JFT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.8.3 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 4.4· Network · High privileges · No interaction · EPSS 0.00246 · Published 2024-05-29 · No fix listed CWE-79