Threats tagged 'ghsa-cqgc-p4qg-hj32'

A stored cross-site scripting (XSS) vulnerability exists in the Meta Box – WordPress Custom Fields Framework up to version 5.15.3. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers with low privileges to inject malicious scripts that execute in the context of other users. The flaw can lead to partial compromise of confidentiality, integrity, and availability of affected systems.