CVE-2024-6766

Name of the Vulnerable Software and Affected Versions shortcodes-ultimate-pro WordPress plugin versions prior to 7.2.1

Description The issue allows users with the contributor role and above to perform Stored Cross-Site Scripting attacks due to the lack of validation and escaping of some shortcode attributes before they are outputted in a page or post where the shortcode is embedded.

Recommendations For versions prior to 7.2.1, update to version 7.2.1 or later to resolve the issue.