Threats tagged 'ghsa-mc48-45x9-jh54'

The Page Builder by SiteOrigin WordPress plugin versions prior to 2.38.0 contain a vulnerability where a widget property is not properly sanitized or escaped before storage and output. This flaw allows users with contributor role or higher to perform stored cross-site scripting (XSS) attacks against users with higher privileges when they open the affected post in the editor.