Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qx4c-77h7-7fwj

Опубликовано: 30 мая 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The Easy Forms for Mailchimp WordPress plugin through 6.8.8 does not sanitise and escape a parameter before outputting it back in the page when the debug option is enabled, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

The Easy Forms for Mailchimp WordPress plugin through 6.8.8 does not sanitise and escape a parameter before outputting it back in the page when the debug option is enabled, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

EPSS

Процентиль: 93%
0.11445
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 2 лет назад

The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and escape a parameter before outputting it back in the page when the debug option is enabled, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

EPSS

Процентиль: 93%
0.11445
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79