Threats tagged 'ghsa-g7hf-c2j5-3f79'

The Sequential Order Numbers for WooCommerce plugin for WordPress versions up to and including 3.6.5 is vulnerable to stored cross-site scripting (XSS) via 'condition' post meta array keys. This vulnerability arises from insufficient input sanitization and output escaping, allowing authenticated users with contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.