Threats tagged 'ghsa-64qp-7wm4-5r2c'

A stored cross-site scripting (XSS) vulnerability exists in myCred up to version 4.0.2 due to improper neutralization of input during web page generation. This vulnerability allows an attacker with low privileges to inject malicious scripts that can be executed in the context of other users. The flaw impacts confidentiality, integrity, and availability of the affected system. The CVSS score is 6.5 (medium severity). No patch or remediation information is currently provided.