Threats tagged 'ghsa-9jg4-gr2w-m5jg'

A stored cross-site scripting (XSS) vulnerability exists in the Nickboss WordPress File Upload plugin (up to version 5.2.1). This vulnerability arises from improper neutralization of input during web page generation, allowing attackers to inject malicious scripts that can execute in users' browsers. The vulnerability has a high severity with a CVSS score of 7.1.