Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103643
HistoryOct 24, 2021 - 12:00 a.m.

WordPress Easy Download Manager and File Sharing plugin cross-site scripting vulnerability

2021-10-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
download manager
file sharing
cross-site scripting
vulnerability
php
mysql
client side

EPSS

0.001

Percentile

24.8%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.The WordPress Easy Download Manager and File Sharing plugin has a cross-site scripting vulnerability in versions prior to 1.6.57, which stems from a lack of checksum filtering of user-supplied data and output data. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%