A vulnerability was found in AHAthat Plugin up to 1.6 on WordPress. It has been classified as problematic. Affected is an unknown function. The manipulation of the argument REQUEST_URI leads to cross site scripting.

This vulnerability is traded as CVE-2024-12595. It is possible to launch the attack remotely. There is no exploit available.