Threats tagged 'ghsa-p84g-rm2j-x53m'

The MeetingList WordPress plugin versions up to and including 0.11 are vulnerable to stored cross-site scripting (XSS) via admin settings. This vulnerability arises from insufficient input sanitization and output escaping, allowing authenticated users with administrator-level permissions or higher to inject malicious scripts. The issue specifically affects multi-site WordPress installations or those with the unfiltered_html capability disabled.