Namasha
Monthly
Stored cross-site scripting in the Namasha By Mdesign WordPress plugin allows authenticated attackers with Contributor-level access to inject JavaScript via the ‘playicon_title’ parameter. All plugin versions up to 1.2.00 are affected, enabling script execution when other users view the injected content. No active exploitation or public exploit code is known, and EPSS indicates a very low exploitation probability (0.04%).
Stored cross-site scripting in the Namasha By Mdesign WordPress plugin allows authenticated attackers with Contributor-level access to inject JavaScript via the ‘playicon_title’ parameter. All plugin versions up to 1.2.00 are affected, enabling script execution when other users view the injected content. No active exploitation or public exploit code is known, and EPSS indicates a very low exploitation probability (0.04%).