Threats tagged 'ghsa-p8xr-fh24-8289'

The Brizy – Page Builder plugin for WordPress versions up to and including 2.8.11 is vulnerable to unauthenticated stored cross-site scripting (XSS). This vulnerability arises from missing nonce verification for unauthenticated form submissions, improper handling of file upload fields when no file is uploaded, and reversal of security encoding before output in the admin interface. An attacker can inject malicious scripts that execute when an administrator views the affected form leads page.