Описание
The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.8 (исключая)
cpe:2.3:a:menubar:menubar:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 43%
0.00208
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
почти 4 года назад
The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting
EPSS
Процентиль: 43%
0.00208
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79