TI-2024-11772 CVE-2024-12697 · GHSA-pxr9-8268-fwc5
real.Kit <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The real.Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping.