Threats tagged 'ghsa-fwqv-wxrj-w6cq'

The Meta Display Block plugin for WordPress versions up to and including 1.0.0 contains a stored cross-site scripting (XSS) vulnerability. This flaw arises from insufficient input sanitization and output escaping in the Meta Display Block feature. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages.