Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vvqg-9xpw-c884

Опубликовано: 23 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenticated and authenticated users when the curl library is installed) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenticated and authenticated users when the curl library is installed) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue

EPSS

Процентиль: 93%
0.10373
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 3 лет назад

The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanitise and escape the a parameter via an AJAX action (available to both unauthenticated and authenticated users when the curl library is installed) before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue

EPSS

Процентиль: 93%
0.10373
Средний

6.1 Medium

CVSS3

Дефекты

CWE-79