Threats Tagged 'ghsa-mp7f-3rhr-22p2'

The Kirki – Freeform Page Builder, Website Builder & Customizer WordPress plugin is affected by a stored cross-site scripting (XSS) vulnerability in all versions up to and including 6.2.0. This vulnerability arises from insufficient input sanitization and output escaping of page builder text content. Authenticated users with the kirki_content_access capability can inject malicious scripts that execute when other users view the affected pages.