Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h52v-6ppv-4xw2

Опубликовано: 18 июл. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

EPSS

Процентиль: 43%
0.0021
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

EPSS

Процентиль: 43%
0.0021
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79