Threats tagged 'ghsa-rw82-wfj9-mgqf'

The Subscribe2 – Form, Email Subscribers & Newsletters plugin for WordPress contains a Stored Cross-Site Scripting (XSS) vulnerability in the 'data[ip]' parameter. This affects all versions up to and including 10.47. The flaw arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject malicious scripts that execute when a user views the affected page.