Email Encoder – Protect Email Addresses and Phone Numbers, CVE-2024-4483

CVE, Research URL: CVE-2024-4483
Home page URL: Security reports for Email Encoder – Protect Email Addresses and Phone Numbers
Application: Email Encoder – Protect Email Addresses and Phone Numbers
Published on: Jul 29, 2024
Research Description: The Email Encoder WordPress plugin before 2.2.2 does not escape the WP_Email_Encoder_Bundle_options[protection_text] parameter before outputting it back in an attribute in an admin page, leading to a Stored Cross-Site Scripting
Affected versions: max 2.2.2.
Status: vulnerable

Email Encoder &#8211; Protect Email Addresses and Phone Numbers, CVE-2024-4483