Threats tagged 'ghsa-hcg5-r665-65qx'

A stored cross-site scripting (XSS) vulnerability exists in WC Lovers WCFM – Frontend Manager for WooCommerce versions up to 6.8.1. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers with limited privileges to inject malicious scripts that execute in the context of other users.