Threats tagged 'ghsa-m3cj-4969-qh2q'

Subscribe2 WordPress plugin versions before 10.46 contain a reflected Cross-Site Scripting (XSS) vulnerability. This occurs because the plugin does not properly escape user-supplied input before reflecting it in a public subscription form. An unauthenticated visitor who interacts with a crafted link can trigger script execution in their browser. The vulnerability has a CVSS score of 6.1, indicating medium severity.