Threats tagged 'ghsa-8rfp-386c-p2rw'

The Graphina – Elementor Charts and Graphs plugin for WordPress versions up to and including 3.1.8 is vulnerable to stored cross-site scripting (XSS) due to insufficient input sanitization and output escaping on multiple chart widgets. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability affects various chart widgets such as Area Chart, Line Chart, Column Chart, Donut Chart, Heatmap Chart, Radar Chart, Polar Chart, Pie Chart, Radial Chart, and Advance Data Table widgets.