Threats tagged 'ghsa-vq57-g56v-5wc4'

The Soledad WordPress theme up to version 8.7.7 contains a stored cross-site scripting (XSS) vulnerability in its social profile fields. Authenticated users with subscriber-level access or higher can inject malicious scripts that execute when any user visits the attacker's author archive page. This vulnerability arises from insufficient input sanitization and output escaping, exposing the injected payload publicly regardless of post publication status.