Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9pqf-c964-4pgp

Опубликовано: 17 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.8

Описание

Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1. If a malicious administrative user customizes the administrative page with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the page.

Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1. If a malicious administrative user customizes the administrative page with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the page.

EPSS

Процентиль: 41%
0.00195
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
около 1 года назад

Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1. If a malicious administrative user customizes the administrative page with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the page.

EPSS

Процентиль: 41%
0.00195
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79