Threats tagged 'ghsa-qpcv-hp4w-gwcq'

A stored cross-site scripting (XSS) vulnerability exists in Noptin newsletter-optin-box versions up to and including 4.4.2. This vulnerability allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The flaw is identified as CWE-79 and has a CVSS 3.1 base score of 7.1, indicating high severity.