Threats tagged 'ghsa-mch5-g7m5-v76f'

A stored cross-site scripting (XSS) vulnerability has been reported by a HackerOne community member in the navigation box of advertiser-related pages. The vulnerability is triggered via campaign names, which serve as the vector for the stored XSS. This flaw allows an attacker to inject malicious scripts that are stored and executed when users access affected pages.