Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-53278

Опубликовано: 26 нояб. 2024
Источник: nvd
CVSS3: 4.8
EPSS Низкий

Описание

Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the admin screen.

EPSS

Процентиль: 29%
0.00105
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.8
github
около 1 года назад

Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are accessing the admin screen.

EPSS

Процентиль: 29%
0.00105
Низкий

4.8 Medium

CVSS3

Дефекты

CWE-79