Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5gj7-9vg9-w5rc

Опубликовано: 28 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting

EPSS

Процентиль: 84%
0.02188
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting

EPSS

Процентиль: 84%
0.02188
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79