Threats tagged 'ghsa-p3wx-xh7w-q769'

The Classified Listing WordPress plugin version 5.0.3 and earlier contains a vulnerability that allows authenticated users with Subscriber-level access or higher to execute arbitrary shortcodes. This occurs because the plugin does not properly validate input before passing it to the do_shortcode function, enabling arbitrary shortcode execution.