Threats tagged 'ghsa-mxg7-8fqf-6h2j'

The Insert Headers and Footers Code – HT Script plugin for WordPress versions up to and including 1.1.6 contains a stored cross-site scripting (XSS) vulnerability. This flaw allows authenticated users with Author-level access or higher to inject arbitrary scripts that execute when other users view the affected pages. The vulnerability arises from insufficient capability checks in the plugin.