Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r67x-mwhq-xx7f

Опубликовано: 04 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users

The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users

EPSS

Процентиль: 82%
0.01742
Низкий

8.2 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.2
nvd
больше 1 года назад

The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users

EPSS

Процентиль: 82%
0.01742
Низкий

8.2 High

CVSS3

Дефекты

CWE-79