Threats tagged 'ghsa-xcpx-4ghq-5cp2'

Multiple injection vulnerabilities exist in resource metadata fields of GBIF Integrated Publishing Toolkit versions before 3.3.5. These flaws allow authenticated remote attackers to execute code in another user's session via stored cross-site scripting after user interaction. The vulnerabilities have a medium severity rating and a CVSS score of 4.8. No patch or fixed version information is provided in the available data.