Threats tagged 'ghsa-cffj-cwcj-4vv7'

The AMP for WP plugin for WordPress up to version 1.1.17 is vulnerable to stored cross-site scripting (XSS) via the 'headline-*' shortcode attribute. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users access affected pages. Subscriber-level users can exploit this by storing malicious shortcodes in their biographical info fields, bypassing WordPress's HTML tag filtering and AMP content sanitizers.