Threats tagged 'ghsa-rhvh-vhq3-h52g'

The Greenshift WordPress plugin, used for animation and page builder blocks, suffers from a Stored DOM-Based Cross-Site Scripting (XSS) vulnerability via the 'comment' parameter in all versions up to and including 13.2.1. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when users view affected pages. Exploitation requires a specific page configuration involving an Advanced HTML Element block with Split Text animation wrapping a Latest Comments block displaying comment excerpts.