Threats tagged 'ghsa-8qxc-5xpr-mpqr'

The If-So Dynamic Content – Elementor & All Page Builders Personalization plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 1.10.2. This vulnerability arises from insufficient input sanitization and output escaping of certain parameters, allowing authenticated users with contributor-level access or higher to inject malicious scripts. These scripts execute whenever a user accesses the affected page, potentially compromising user data or session integrity.