Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8fv5-7m8g-42cx

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitised before being output in an attribute.

The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitised before being output in an attribute.

EPSS

Процентиль: 56%
0.00332
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 4 лет назад

The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitised before being output in an attribute.

EPSS

Процентиль: 56%
0.00332
Низкий

Дефекты

CWE-79