Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rf7m-w6xx-cv97

Опубликовано: 20 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 3.5

Описание

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

EPSS

Процентиль: 30%
0.00109
Низкий

3.5 Low

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 3.5
nvd
около 1 года назад

In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

EPSS

Процентиль: 30%
0.00109
Низкий

3.5 Low

CVSS3

Дефекты

CWE-79