exploitDog

GHSA-6pq3-4268-89g5

Опубликовано: 08 мар. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

Ссылки

EPSS

Процентиль: 43%

0.0021

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2021-25039

CVSS3: 6.1

nvd

почти 4 года назад

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

EPSS

Процентиль: 43%

0.0021

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79