Threats tagged 'ghsa-v2fv-9vwq-vfxq'

The User Frontend WordPress plugin versions up to and including 4.3.13 are vulnerable to stored Cross-Site Scripting (XSS) via the taxonomy_field_name parameter. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users access the affected pages. Exploitation requires the plugin to have a taxonomy field configured in text-input mode with guest post submission enabled on at least one frontend form.