Threats tagged 'ghsa-cmj3-q4qh-2qvf'

The BuddyForms plugin for WordPress up to version 2.10.5 is vulnerable to stored cross-site scripting (XSS) via the 'bf_post_type' and 'buddyforms_form_content' parameters. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts. Exploitation requires a BuddyForms form with public submissions enabled and an active theme with a widgetized sidebar, enabling malicious Custom HTML widgets to be injected and executed on the front end.