Threats tagged 'ghsa-vqc7-qwhp-rgxp'

The Giveaways and Contests by RafflePress WordPress plugin versions up to and including 1.12.19 contain a stored cross-site scripting (XSS) vulnerability. This flaw arises from insufficient input sanitization and output escaping of multiple social media username parameters, allowing unauthenticated attackers to inject malicious scripts that execute when users view affected pages.