Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6cq-mg6h-wjfc

Опубликовано: 18 янв. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The ACF Photo Gallery Field WordPress plugin before 1.7.5 does not sanitise and escape the post parameter in the includes/acf_photo_gallery_metabox_edit.php file before outputing back in an attribute, leading to a Reflected Cross-Site Scripting issue

The ACF Photo Gallery Field WordPress plugin before 1.7.5 does not sanitise and escape the post parameter in the includes/acf_photo_gallery_metabox_edit.php file before outputing back in an attribute, leading to a Reflected Cross-Site Scripting issue

EPSS

Процентиль: 52%
0.00288
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 4 лет назад

The ACF Photo Gallery Field WordPress plugin before 1.7.5 does not sanitise and escape the post parameter in the includes/acf_photo_gallery_metabox_edit.php file before outputing back in an attribute, leading to a Reflected Cross-Site Scripting issue

EPSS

Процентиль: 52%
0.00288
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79