Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-93363
HistoryNov 21, 2021 - 12:00 a.m.

WordPress QR Redirector plugin cross-site scripting vulnerability

2021-11-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
wordpress
qr redirector
cross-site scripting
vulnerability
php
mysql
data validation
javascript code
client side

EPSS

0.001

Percentile

24.8%

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on PHP and MySQL servers. WordPress QR Redirector plugin in versions prior to 1.6.1 suffers from a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%