wpDiscuz Cross-Site Scripting Vulnerability via Unescaped Attachment URLs

A cross-site scripting vulnerability has been identified in wpDiscuz versions prior to 7.6.47. This issue allows attackers to inject malicious code by exploiting unescaped attachment URLs in the HTML output, particularly through the WpdiscuzHelperUpload class. By crafting harmful attachment records or using filter hooks, attackers can embed arbitrary JavaScript into the attributes of image and anchor tags. This injected code is executed in the context of WordPress users who are viewing comments.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user viewing the comments.