Gspeech Tts Wordpress Text To Speech Plugin
Monthly
Stored cross-site scripting in the GSpeech TTS - WordPress Text To Speech plugin (all versions up to and including 3.22.0) allows unauthenticated attackers to plant script content in a post's comment field that survives WordPress kses sanitization and only becomes executable when the plugin rewrites the rendered HTML at request time. Any visitor who subsequently loads the affected page can have attacker-controlled script run in their browser session, though exposure depends on the site accepting and auto-publishing unauthenticated comments and on GSpeech output being rendered on that page. No public exploit code has been identified at time of analysis and there is no indication of confirmed active exploitation (not in CISA KEV); exploitation requirements include the plugin being active and its output-buffer rewrite running on the page displaying the comment.
Stored cross-site scripting in the GSpeech TTS - WordPress Text To Speech plugin (all versions up to and including 3.22.0) allows unauthenticated attackers to plant script content in a post's comment field that survives WordPress kses sanitization and only becomes executable when the plugin rewrites the rendered HTML at request time. Any visitor who subsequently loads the affected page can have attacker-controlled script run in their browser session, though exposure depends on the site accepting and auto-publishing unauthenticated comments and on GSpeech output being rendered on that page. No public exploit code has been identified at time of analysis and there is no indication of confirmed active exploitation (not in CISA KEV); exploitation requirements include the plugin being active and its output-buffer rewrite running on the page displaying the comment.