Логотип exploitDog
bind:CVE-2022-0380
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-0380

Количество 2

Количество 2

nvd логотип

CVE-2022-0380

около 4 лет назад

The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 3.2.3.

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-8f2f-h9hr-hqj6

почти 4 года назад

The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 3.2.3.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-0380

The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 3.2.3.

CVSS3: 6.1
0%
Низкий
около 4 лет назад
github логотип
GHSA-8f2f-h9hr-hqj6

The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 3.2.3.

0%
Низкий
почти 4 года назад

Уязвимостей на страницу