Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xwp2-775j-9939

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

EPSS

Процентиль: 41%
0.00188
Низкий

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
почти 4 года назад

The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

EPSS

Процентиль: 41%
0.00188
Низкий

Дефекты

CWE-79