TI-2024-11427 CVE-2024-12320 · GHSA-388j-jw77-hhcjTeam Rosters <= 4.7 - Reflected Cross-Site Scripting via 'tab'Priority LOW 27The Team Rosters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in all versions up to, and including, 4.7 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00338 · Published 2025-01-30 · No fix listed CWE-79