The Campus Directory is a plugin for WordPress that is used to create directories for faculty, staff, and students. Unfortunately, it has a security vulnerability that allows for Stored Cross-Site Scripting. This means that attackers who have a certain level of access can insert harmful code into the directory pages, which will run when someone views those pages.