Threats tagged 'ghsa-hx67-pm9f-r3jv'

A stored cross-site scripting (XSS) vulnerability exists in the wp-review-slider-pro WordPress plugin before version 12.7.12. The plugin's AJAX handler that saves review submission forms lacks proper capability checks and uses a nonce generated for every visitor, allowing any authenticated user, including subscribers, to overwrite live forms with malicious field values. These values are output without escaping on public pages, leading to stored XSS.