Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v87w-5qjf-xwc5

Опубликовано: 19 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

EPSS

Процентиль: 29%
0.00107
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 1 года назад

In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to implement Stored XSS on behalf of the editor by embedding malicious script, which entails account takeover backdoor

EPSS

Процентиль: 29%
0.00107
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79