Threats tagged 'ghsa-2vrq-rcwg-5982'

The Simple CAPTCHA with Cloudflare Turnstile plugin for WordPress versions up to 1.44.3 is vulnerable to stored cross-site scripting (XSS) via the 'id' attribute of the [gravity-simple-turnstile] shortcode. This vulnerability arises from insufficient sanitization and escaping of the shortcode attribute, allowing authenticated users with contributor-level access or higher to inject malicious scripts that execute when the affected page is viewed.