Threats tagged 'ghsa-rx8r-4hqr-25gw'

A stored cross-site scripting (XSS) vulnerability exists in the GiveWP – Donation Plugin and Fundraising Platform for WordPress, affecting versions up to and including 4.17.0. The flaw arises from insufficient sanitization and escaping of user-supplied shortcode attributes, allowing authenticated users with Contributor-level access or higher to inject malicious scripts. These scripts execute whenever a user views the affected page, potentially compromising user interactions.