exploitDog

CVE-2025-28918

Опубликовано: 11 мар. 2025

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A. Jones Featured Image Thumbnail Grid thumbnail-grid allows Stored XSS.This issue affects Featured Image Thumbnail Grid: from n/a through <= 6.8.

Ссылки

https://patchstack.com/database/Wordpress/Plugin/thumbnail-grid/vulnerability/wordpress-featured-image-thumbnail-grid-plugin-6-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve

EPSS

Процентиль: 18%

0.00262

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-37mm-53pr-gqf6

CVSS3: 6.5

github

больше 1 года назад

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A. Jones Featured Image Thumbnail Grid allows Stored XSS. This issue affects Featured Image Thumbnail Grid: from n/a through 6.6.1.

EPSS

Процентиль: 18%

0.00262

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-79