Threats tagged 'ghsa-jxcx-x35q-5pgm'

The Nari Accountant WordPress plugin versions up to and including 1.0.12 contain a stored cross-site scripting (XSS) vulnerability in account settings. This vulnerability allows authenticated users with editor-level or higher permissions to inject malicious scripts that execute when other users access the affected pages. The issue specifically affects multi-site installations or sites where the unfiltered_html capability is disabled.