Threats tagged 'ghsa-3p8j-h46m-vhgw'

A stored cross-site scripting (XSS) vulnerability exists in Everest Forms up to version 3.6.3. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges to execute malicious scripts in the context of affected users. The vulnerability has a medium severity rating with a CVSS score of 6.5.