Threats tagged 'ghsa-jv5v-wg25-69hq'

A stored Cross-Site Scripting (XSS) vulnerability exists in the JetEngine WordPress plugin versions prior to 3.8.12. This flaw allows users with Contributor role or higher to inject malicious scripts via post meta values that are not properly escaped when output through certain shortcodes. The injected scripts execute in the context of higher-privileged users, such as administrators.