Threats tagged 'ghsa-c6cw-rfmh-vwx8'

A stored cross-site scripting (XSS) vulnerability exists in WPVibes AnyWhere Elementor plugin versions up to and including 1.3.0. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker with low privileges to execute malicious scripts in the context of other users. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level with impacts on confidentiality, integrity, and availability.