Threats tagged 'ghsa-f738-cw88-chq3'

A stored cross-site scripting (XSS) vulnerability exists in WPMU DEV Smush Image Compression and Optimization plugin versions up to 4.3.5. This vulnerability is due to improper neutralization of input during web page generation, which could allow an attacker with low privileges to execute malicious scripts in the context of the affected application. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.