Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08376
HistoryJan 18, 2022 - 12:00 a.m.

WordPress WP Booking System plugin cross-site scripting vulnerability

2022-01-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress foundation
php language
mysql
cross-site scripting
validation
web application
client-side data
vulnerability
javascript code
cnvd

EPSS

0.001

Percentile

24.8%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress WP Booking System plugin has a cross-site scripting vulnerability in versions prior to 2.0.15, which stems from the lack of proper validation of client-side data by the WEB application. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%