Threats tagged 'ghsa-73rm-hhh2-w9mf'

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Maspik – Spam blacklist versions up to and including 2.9.1. This vulnerability allows an attacker to inject malicious scripts without authentication. The CVSS 3.1 base score is 7.1, indicating a high severity issue with network attack vector, low attack complexity, no privileges required, and user interaction needed. The vulnerability impacts confidentiality, integrity, and availability to a limited extent.