CVE-2021-20746

Опубликовано: 28 июн. 2021

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Ссылки

https://cabrerahector.com/
Vendor Advisory
https://cabrerahector.com/wordpress/wordpress-popular-posts-5-3-improved-php-8-support-retina-display-support-and-more/#minor-updates-and-hotfixes
Vendor Advisory
https://jvn.jp/en/jp/JVN63066062/index.html
Third Party Advisory
https://wordpress.org/plugins/wordpress-popular-posts/
Product
Release Notes
Third Party Advisory
https://cabrerahector.com/
Vendor Advisory
https://cabrerahector.com/wordpress/wordpress-popular-posts-5-3-improved-php-8-support-retina-display-support-and-more/#minor-updates-and-hotfixes
Vendor Advisory
https://jvn.jp/en/jp/JVN63066062/index.html
Third Party Advisory
https://wordpress.org/plugins/wordpress-popular-posts/
Product
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wordpress_popular_posts_project:wordpress_popular_posts:*:*:*:*:*:wordpress:*:*

Версия до 5.3.2 (включая)

EPSS

Процентиль: 74%

0.00832

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-pmfx-m292-fc24

github

больше 3 лет назад