Threats tagged 'ghsa-fq8p-wwgm-f3qv'

A stored cross-site scripting (XSS) vulnerability exists in WC Lovers WCFM Membership plugin versions up to 2.12.0. This vulnerability allows attackers to inject malicious scripts that are executed in the context of users' browsers when they view affected pages. The flaw is due to improper neutralization of input during web page generation.