Threats tagged 'ghsa-mwgm-48r9-2fm3'

A stored cross-site scripting (XSS) vulnerability exists in John-Michael L'Allier's Create mediavine-create component, affecting versions up to 3.1.1. This vulnerability involves improper neutralization of input during web page generation, which could allow an attacker with limited privileges and user interaction to execute malicious scripts in the context of affected users.