Chevon Phillip

Name of the Vulnerable Software and Affected Versions: ImageBoss WordPress plugin versions prior to 3.0.6 Description: The issue concerns the lack of sanitization and escaping of the `Source Name` setting, potentially allowing high-privilege users to perform Cross-Site Scripting attacks. Recommendations: For versions prior to 3.0.6, update to version 3.0.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the `Source Name` setting to minimize the risk of exploitation.