Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gpxw-6663-f9cg

Опубликовано: 02 фев. 2022
Источник: github
Github: Не прошло ревью

Описание

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

EPSS

Процентиль: 87%
0.0352
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 4 лет назад

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue

EPSS

Процентиль: 87%
0.0352
Низкий

Дефекты

CWE-79