Threats tagged 'ghsa-627w-fp5f-x4qx'

The Reuse Builder plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'reuse_builder_single_post_title' shortcode affecting all versions up to and including 1.7. This vulnerability arises from insufficient sanitization and escaping of input in the 'style' attribute, allowing authenticated users with contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.