Threats tagged 'ghsa-98q7-93hh-5593'

The Webmention plugin for WordPress versions up to and including 5.10.1 contains a stored cross-site scripting (XSS) vulnerability via the Open Graph og:title meta tag. This vulnerability arises from insufficient input sanitization, allowing unauthenticated attackers to inject arbitrary scripts. However, exploitation requires an administrator to approve the injected webmention comment, as the payload is stored in comment content without proper filtering.