Description
Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce PayU India (PayUmoney-PayUbiz) Parameter Tampering (2.1.1)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-9064)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5489)
XWikiplatform Relative Path Traversal Vulnerability (CVE-2025-55747)