Threats tagged 'ghsa-j2w8-g58j-x67x'

A stored cross-site scripting (XSS) vulnerability exists in the wpWax Directorist plugin up to version 8.10.7. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers with low privileges to inject malicious scripts that execute in the context of other users. The flaw impacts confidentiality, integrity, and availability to a limited extent. No official patch or remediation details are provided in the available data.