WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-59603)

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in versions prior to JNews WordPress theme 8.0.6. The vulnerability stems from the program not cleaning up the cat_id parameter in POST requests, and an attacker could The vulnerability can be exploited to cause XSS attacks.