Threats tagged 'ghsa-frgx-5mq3-6vq7'

The Table Field Add-on for ACF and SCF WordPress plugin versions up to 1.4.1-RC2 contains a stored cross-site scripting (XSS) vulnerability. Authenticated users with subscriber-level access or higher can inject malicious scripts via the Table Field Value. These scripts execute whenever a user views the affected page, potentially compromising user interactions. The vulnerability arises from insufficient input sanitization and output escaping.