Threats tagged 'ghsa-73qh-px6h-pjq6'

A stored cross-site scripting (XSS) vulnerability exists in Contact Form 7 – Post Fields (cf7-post-fields) up to version 2.6.0. This vulnerability arises from improper neutralization of input during web page generation, allowing an attacker with limited privileges to inject malicious scripts that can execute in the context of other users. The vulnerability has a CVSS v3.1 score of 6.5, indicating a medium severity level with potential impacts on confidentiality, integrity, and availability.