Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6h4x-c495-6qh7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue

The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue

EPSS

Процентиль: 61%
0.0042
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 4 лет назад

The W3 Total Cache WordPress plugin before 2.1.3 did not sanitise or escape some of its CDN settings, allowing high privilege users to use JavaScript in them, which will be output in the page, leading to an authenticated Stored Cross-Site Scripting issue

EPSS

Процентиль: 61%
0.0042
Низкий

Дефекты

CWE-79