CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue affects tagDiv Opt-In Builder: from n/a through <= 1.7.4.
Explanation of Vulnerability in Simple Terms
tagDiv Opt-In Builder versions 1.7.4 and earlier contain a cross-site scripting (XSS) vulnerability. An attacker can inject malicious scripts that execute in visitors' browsers when they interact with the opt-in form. The vulnerability requires user interaction and can affect multiple users across the site. Update to a version newer than 1.7.4 to remediate.
What an attacker can do
Inject malicious scripts that run in visitors' browsers when they interact with the opt-in form.
Potential impact on your site
Visitors' browsers can be compromised; attackers may steal credentials, session tokens, or redirect users to malicious sites.
Conditions required to exploit
No authentication required. Visitor must interact with the affected opt-in form (click, submit, or view).
Key dates
External resources
Related vulnerabilities
