Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5hqx-qwqq-6xmq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue

The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue

EPSS

Процентиль: 51%
0.00281
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 4 лет назад

The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue

EPSS

Процентиль: 51%
0.00281
Низкий

Дефекты

CWE-79