Threats tagged 'ghsa-q58p-cmmq-f3q2'

A stored cross-site scripting (XSS) vulnerability exists in the wpDiscuz plugin for WordPress, identified as CVE-2026-119366. This vulnerability is due to improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. It affects versions of wpDiscuz up to and including 7.6.73. The vulnerability has a high severity score of 7.1 according to CVSS 3.1, indicating it can be exploited remotely without privileges but requires user interaction. Exploitation could lead to partial confidentiality, integrity, and availability impacts.