Threats tagged 'ghsa-vxm8-8rj5-3798'

The Knowledge Building WordPress plugin versions before 0.7.3 contain a vulnerability where comments submitted through the reply feature are not properly sanitized or escaped. This flaw allows unauthenticated users to inject stored cross-site scripting (XSS) payloads, which are then published without moderation. As a result, any visitor to the affected posts, including administrators, can be subjected to these XSS attacks.