exploitDog

GHSA-6qmq-v879-phcg

Опубликовано: 02 авг. 2022

Источник: github

Github: Не прошло ревью

CVSS3: 5.4

Описание

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

Ссылки

EPSS

Процентиль: 38%

0.00167

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2022-36343

CVSS3: 3.4

nvd

больше 3 лет назад

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

EPSS

Процентиль: 38%

0.00167

Низкий

5.4 Medium

CVSS3

CVE ID

Дефекты

CWE-79