Lucene search
China National Vulnerability DatabaseCNVD-2021-83673HistoryOct 19, 2021 - 12:00 a.m.
WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-83673)
2021-10-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
wordpress
plugin
cross-site scripting
vulnerability
insufficient input validation
administrative user access
EPSS
0.001
Percentile
26.4%
WordPress plugin is a WordPress open source application plugin. WordPress plugin HAL has a cross-site scripting vulnerability that originates from several parameters in the ~/wp-hal.php file leading to insufficient input validation and cleanup, which can be exploited by an attacker with administrative user access to inject arbitrary Web scripts.
Related
cve
cve
CVE-2021-39349
2021-10-15 13:15:08
prion
prion
Cross site scripting
2021-10-15 13:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Author Bio Box < 3.4.0 - Admin+ Stored Cross-Site Scripting
2021-10-14 00:00:00
patchstack
patchstack
nvd
nvd
CVE-2021-39349
2021-10-15 13:15:08
osv
osv
CVE-2021-39349
2021-10-15 13:15:08