Threats tagged 'ghsa-rcc4-4h34-94v4'

A stored cross-site scripting (XSS) vulnerability exists in the Joomla extension tassos.gr Advanced Custom Fields versions 2.8.2 through 2.8.15, 3.0.0 through 3.1.8, and Smile Pack versions 1.1.2 through 1.2.9 and 2.0.0 through 2.1.6. This vulnerability allows a user with privileges to edit a Map marker label, such as an article author, to inject malicious script code that executes for any user who views the marker. The vulnerability is classified as high severity with a CVSS 4.0 base score of 7.5. No patch or remediation information is provided in the source data.