Threats tagged 'ghsa-cv33-h348-47m4'

CVE-2026-61959 is a medium severity Cross-Site Scripting (XSS) vulnerability affecting Strategy11 Team's Business Directory plugin versions up to and including 6.4.24. The vulnerability involves improper neutralization of input during web page generation, allowing a subscriber-level user to potentially execute malicious scripts. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.