Molongui Authorship – Author Boxes, Guest Authors & Co-Authors (<= 5.2.12)

The Molongui Authorship plugin is vulnerable to unauthenticated Stored DOM-based XSS via unsanitized href attributes in comment content, enabling arbitrary script execution in victim browsers.