Threats tagged 'ghsa-m4ff-rp67-jh94'

CVE-2026-61960 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting WP Full Stripe Free versions up to and including 8.5.0. This vulnerability allows an attacker to inject malicious scripts without authentication, potentially impacting confidentiality, integrity, and availability of affected systems. The vulnerability has a high severity with a CVSS score of 7.1. No patch or official remediation information is currently provided.