Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cghc-jhgh-fr89

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue

The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue

EPSS

Процентиль: 61%
0.0042
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
nvd
больше 4 лет назад

The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue

EPSS

Процентиль: 61%
0.0042
Низкий

Дефекты

CWE-79