Threats tagged 'ghsa-x3vr-5276-4vwg'

The Employee Spotlight – Team Member Showcase & Meet the Team Plugin for WordPress contains a stored cross-site scripting (XSS) vulnerability in all versions up to and including 5.1.2. This vulnerability arises from insufficient input sanitization and output escaping of social URLs. Authenticated users with Contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages.