The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter).

Published Dec 8, 2020 · Updated Aug 4, 2024 · Assigned by mitre