Threats tagged 'ghsa-99hp-4jc9-8pff'

A stored cross-site scripting (XSS) vulnerability exists in Futurio Extra plugin versions up to 2.0.25. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers with low privileges to execute malicious scripts in the context of other users. The vulnerability has a medium severity rating with a CVSS score of 6.5.