Threats tagged 'ghsa-558h-x4v5-3hwr'

The User Frontend WordPress plugin up to version 4.3.13 contains a privilege escalation vulnerability via the post_content parameter in the submit_post() function. An attacker with Subscriber-level access can inject a specially crafted shortcode that bypasses shortcode filtering, enabling the creation of an Editor-level account with active session privileges on the frontend. This occurs due to inconsistent sanitization methods and conditional shortcode registration tied to is_admin() checks.