Threats tagged 'ghsa-c6w7-h32c-p62p'

A stored cross-site scripting (XSS) vulnerability exists in Sarah Giles Dynamic User Directory (dynamic-user-directory) affecting versions up to 2.4. This vulnerability involves improper neutralization of input during web page generation, allowing attackers with low privileges to execute scripts in the context of other users. The vulnerability has a CVSS score of 6.5, indicating a medium severity impact with potential confidentiality, integrity, and availability consequences.