Threats tagged 'ghsa-6vp9-3f45-8p8c'

A stored cross-site scripting (XSS) vulnerability exists in the Blocksy Companion plugin for Creative Themes, affecting versions up to 2.1.60. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges and requiring user interaction to execute malicious scripts in the context of the affected application. The vulnerability has a medium severity rating with a CVSS score of 6.5.