CVE-2024-5789: The Triton Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the them

The Triton Lite WordPress theme has a stored cross-site scripting vulnerability (XSS, where attackers inject malicious scripts that run when others view a page) in its Button shortcode's 'url' attribute, affecting all versions up to 1.3. Users with Contributor-level access or higher can inject arbitrary scripts that execute whenever someone visits an affected page due to insufficient input sanitization (cleaning of user input) and output escaping (converting special characters to prevent code execution).