Threats tagged 'ghsa-vrqc-4rp8-xrxq'

A stored cross-site scripting (XSS) vulnerability exists in Cozmoslabs Paid Member Subscriptions plugin versions up to 3.1.3. This vulnerability arises from improper neutralization of input during web page generation, allowing attackers with limited privileges to inject malicious scripts that execute in the context of other users. The flaw can lead to partial confidentiality, integrity, and availability impacts.