Threats tagged 'ghsa-mwjc-q29w-8w22'

The Pet-Manager – Petfinder plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in the kwm-petfinder shortcode in all versions up to and including 3.6.1. This vulnerability arises from insufficient input sanitization and output escaping of user-supplied attributes, allowing authenticated users with Contributor-level access or higher to inject malicious scripts that execute when other users view the affected pages.