Threats tagged 'ghsa-g4vp-m5pr-g7mx'

The Discussion Board WordPress Forum Plugin is vulnerable to stored cross-site scripting (XSS) in versions up to and including 2.6.0. The vulnerability arises from insufficient output escaping of the user profile Website (user_url) field, allowing authenticated users with subscriber-level access or higher to inject malicious scripts. These scripts execute when any user views a Discussion Board topic containing the attacker's reply.