Tri Vulnerabilities

This vulnerability allows an attacker with contributor permissions or higher to inject malicious scripts into a WordPress page or post, which can then execute when other users view the content. It occurs because the GigPress plugin fails to properly check and clean up certain shortcode attributes before displaying them.

This vulnerability allows an attacker to inject malicious scripts into web pages viewed by users of the gigpress plugin for WordPress, potentially stealing sensitive information or hijacking user sessions. It can be exploited if the attacker can input data into the plugin without proper validation, which could happen in forms or comments.