Описание
The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.
Ссылки
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.12.4 (исключая)
cpe:2.3:a:roundupwp:registrations_for_the_events_calendar:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 82%
0.01787
Низкий
9.6 Critical
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 9.6
github
около 1 года назад
The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event registrations, which could allow unauthenticated users to perform Cross-Site Scripting attacks.
EPSS
Процентиль: 82%
0.01787
Низкий
9.6 Critical
CVSS3
Дефекты
CWE-79