Threats tagged 'ghsa-96cx-3fh6-vv56'

The WP2Social Auto Publish plugin for WordPress versions up to and including 2.4.7 is vulnerable to reflected Cross-Site Scripting (XSS) via PostMessage due to insufficient input sanitization and output escaping. This vulnerability allows unauthenticated attackers to inject arbitrary web scripts that execute when a user is tricked into clicking a crafted link. The vulnerability has a medium severity rating with a CVSS score of 6.1.