exploitDog

GHSA-h799-5x6c-6gv8

Опубликовано: 07 авг. 2023

Источник: github

Github: Не прошло ревью

CVSS3: 6.1

Описание

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

Ссылки

EPSS

Процентиль: 55%

0.00325

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2023-3524

CVSS3: 6.1

nvd

больше 2 лет назад

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting

EPSS

Процентиль: 55%

0.00325

Низкий

6.1 Medium

CVSS3

CVE ID

Дефекты

CWE-79