Threats tagged 'ghsa-98p9-pqh4-fph5'

A stored cross-site scripting (XSS) vulnerability exists in Codection Import and export users and customers import-users-from-csv-with-meta component, affecting versions up to 2.5.9. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to inject malicious scripts that execute in the context of affected users. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.