TI-2024-11512 CVE-2024-12408 · GHSA-vq3r-9xcx-7c8mWP on AWS <= 5.2.1 - Reflected Cross-Site ScriptingPriority LOW 27The WP on AWS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST data in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00299 · Published 2024-12-21 · No fix listed CWE-79