Threats tagged 'ghsa-cr8v-hqcv-xjhf'

A stored cross-site scripting (XSS) vulnerability exists in the Redux Framework up to version 4.5.16. This vulnerability involves improper neutralization of input during web page generation, which can lead to script injection. The flaw allows an attacker with limited privileges to inject malicious scripts that execute in the context of other users. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.