Threats tagged 'ghsa-m4h7-mwp4-h59c'

The Copy Anything to Clipboard for WordPress plugin versions before 5.5.5 contains a vulnerability where a shortcode attribute is not properly sanitized and escaped before being stored and rendered via client-side script. This flaw allows users with contributor role or higher to execute stored cross-site scripting (XSS) attacks against users with higher privileges who view or interact with the affected content.