Threats tagged 'ghsa-c8hg-xchr-rq65'

The Relevanssi – A Better Search WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in all versions up to and including 4.28.3. This vulnerability arises from insufficient input sanitization and output escaping of comment content. Exploitation requires the administrator to have configured a non-empty "Allowable tags in excerpts" setting with tags that prefix the injected tag name. An unauthenticated attacker can inject malicious scripts that execute when users access the affected pages.