Threats tagged 'ghsa-479r-rg4f-86j3'

The Greenshift WordPress plugin, used for animation and page builder blocks, suffers from a Stored Cross-Site Scripting (XSS) vulnerability in all versions up to and including 12.2.7. This flaw arises from insufficient input sanitization and output escaping of Chart Data attributes. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages.