Threats tagged 'ghsa-mghc-wcw3-92hj'

The WP Company Info plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the 'class' attribute of the 'social-networks' shortcode. This vulnerability affects all versions up to and including 1.9.0. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages.