Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102819
HistoryNov 29, 2021 - 12:00 a.m.

WordPress Floating Social Media Icon plugin cross-site scripting vulnerability

2021-11-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
wordpress
floating social media
cross-site scripting
vulnerability
authentication
client-side code
php
mysql
web application
attack

EPSS

0.001

Percentile

22.7%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Floating Social Media Icon plugin has a cross-site scripting vulnerability that stems from the lack of proper authentication of client-side data in the WEB application. An authenticated attacker could exploit the vulnerability to execute client-side code.

EPSS

0.001

Percentile

22.7%

Related for CNVD-2021-102819