Threats tagged 'ghsa-qpjp-43f6-4f6v'

The Simple User Registration plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability via the 'wpr_admin_msg' parameter in all versions up to and including 6.6. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts that execute when a user accesses the affected page.