WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-59594)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. prismatic WordPress plugin version 2.8 prior to the security vulnerability, the vulnerability stems from the plugin does not escape ““tab”” in the GET parameter, which leads to reflect The cross-site scripting problem, the attacker can use the vulnerability will be in the context of the login administrator to execute code and so on.