The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gamipress_rank' Shortcode in all versions up to, and including, 7.9.9.1 due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with contributor-level access to inject web scripts tha [truncated]
The GamiPress plugin for WordPress, specifically versions up to and including 7.9.9.1, is vulnerable to Stored Cross-Site Scripting (XSS) via the 'heading_size' Shortcode Attribute in 'gamipress_achievement'. This vulnerability is due to insufficient input sanitization and output escaping, allowing authenticated attackers with contributor-level access and above to inject arbitrary web scripts. These scrip [truncated]
