TI-2024-11615 CVE-2024-12516 · GHSA-wwhj-5x28-4qww
Coupon Plugin <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The Coupon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Coupon Code' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping.