Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101671
HistoryDec 19, 2021 - 12:00 a.m.

WordPress link-list-manager plugin cross-site scripting vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
wordpress
link-list-manager
cross-site scripting
vulnerability
php
mysql
data validation
javascript code
client side
security document

EPSS

0.001

Percentile

30.0%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. link-list-manager plugin is a WordPress open source application plugin. WordPress link-list-manager plugin has a cross-site scripting vulnerability that originates from the category parameter of ~/llm.php Lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

30.0%

Related for CNVD-2021-101671