Threats tagged 'ghsa-jgmr-w25q-m9q5'

1 threat

Threats tagged 'ghsa-jgmr-w25q-m9q5'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.4	EPSS 0.2%	CVE-2026-94421Church Admin · Cross-site Scripting Medium6.4EPSS 0.2%2026-10-10CVE Database V5CVE-2026-94421 The Church Admin WordPress plugin up to version 5.1.2 is vulnerable to stored Cross-Site Scripting (XSS) via the 'email' parameter. Authenticated users with subscriber-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping. EPSS 0.2%Vulnerability andy_moyle #cwe-79 #ghsa-jgmr-w25q-m9q5	CVE Database V5	2026-10-10

Showing 1–1 of 1 result