Threats tagged 'ghsa-m9pc-29fw-3mqp'

A stored cross-site scripting (XSS) vulnerability exists in bPlugins B Blocks up to version 2.1.15 due to improper neutralization of input during web page generation. This vulnerability allows attackers with limited privileges to inject malicious scripts that can affect confidentiality, integrity, and availability. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.