Threats tagged 'ghsa-566w-prw9-fj3g'

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps WordPress plugin versions up to and including 5.5.90 is vulnerable to stored cross-site scripting (XSS) via its Data Projects front-end simple form. This vulnerability arises from insufficient input sanitization and output escaping in the handling of text-based database columns, allowing authenticated users with Subscriber-level access or higher to inject arbitrary scripts that execute when other users view the affected pages.