Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Theme Palace TP Education plugin = 4.4 versions...

PT-2023-23613 · Theme Palace · Wp Education

Name of the Vulnerable Software and Affected Versions: Theme Palace TP Education plugin versions prior to 4.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be...