Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102009
HistoryNov 29, 2021 - 12:00 a.m.

WordPress Awesome Support plugin cross-site scripting vulnerability

2021-11-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

22.9%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Awesome Support plugin in 6.0.6 and its previous versions have cross-site scripting vulnerabilities, the vulnerability stems from the plugin for the parameter id, assignee missing for user-supplied data and output data checksum filtering. An attacker could use this vulnerability to execute JavaScript code on the client side.

0.001 Low

EPSS

Percentile

22.9%

Related for CNVD-2021-102009