Threats tagged 'ghsa-gwjj-9h2j-mhf4'

The Listdom WordPress plugin up to version 6.1.1 contains a stored cross-site scripting (XSS) vulnerability via the 'lsd[remark]' parameter. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. Subscriber-level users can also exploit this due to a missing capability check in an AJAX handler and a publicly exposed nonce on pages with the [listdom-dashboard] shortcode. The vulnerability arises from insufficient input sanitization and output escaping.