Threats tagged 'ghsa-7fcr-c9xh-j9h5'

The TablePress plugin for WordPress versions up to and including 3.2.3 is vulnerable to stored cross-site scripting (XSS) via its table shortcode attributes. This vulnerability arises from insufficient input sanitization and output escaping of user-supplied attributes. Authenticated users with contributor-level access or higher can inject arbitrary scripts that execute when any user views the affected page.