Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101670
HistoryDec 19, 2021 - 12:00 a.m.

WordPress Real WYSIWYG plugin cross-site scripting vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

26.2%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. real WYSIWYG plugin is a WordPress open source application plugin. the WordPress Real WYSIWYG plugin has a security vulnerability that stems from ~/real-wysiwyg.php’s lack of user-supplied data and output data checksum filtering. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
wordpress real wysiwyg pluginle0.0.2

0.001 Low

EPSS

Percentile

26.2%

Related for CNVD-2021-101670