Threats tagged 'ghsa-69r8-298v-gc69'

The Flying Images WordPress plugin (up to version 2.4.14) contains a stored cross-site scripting (XSS) vulnerability in its admin settings. This vulnerability allows authenticated users with administrator-level permissions or higher to inject malicious scripts that execute when other users access the affected pages. The issue specifically affects multi-site WordPress installations or those where the unfiltered_html capability is disabled.