Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4w2r-65x9-4q95

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter.

Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter.

EPSS

Процентиль: 75%
0.01629
Низкий

Дефекты

CWE-79

Связанные уязвимости

nvd
около 12 лет назад

Cross-site scripting (XSS) vulnerability in bvc.php in the Votecount for Balatarin plugin 0.1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) bvcurl parameter.

EPSS

Процентиль: 75%
0.01629
Низкий

Дефекты

CWE-79