CVE-2024-3963

Name of the Vulnerable Software and Affected Versions Giveaways and Contests by RafflePress WordPress plugin versions prior to 1.12.14

Description The issue concerns a lack of sanitization and escaping of certain parameters, potentially allowing users with a role as low as editor to perform Cross-Site Scripting attacks.

Recommendations For versions prior to 1.12.14, update to version 1.12.14 or later to resolve the issue. As a temporary workaround, consider restricting the role of editors to minimize the risk of exploitation.