Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09997
HistoryFeb 10, 2022 - 12:00 a.m.

WordPress NextScripts:Social Networks Auto-Poster插件跨站脚本漏洞

2022-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
wordpress
nextscripts
social networks auto-poster
xss
vulnerability
cross-site scripting
version 4.3.24
administration
dashboard
javascript code

EPSS

0.001

Percentile

41.3%

NextScripts:Social Networks Auto-Poster WordPress plugin is vulnerable to a cross-site scripting vulnerability in versions prior to 4.3.24. The vulnerability stems from the fact that log requests are not escaped before being exported to the relevant administrative The vulnerability stems from the fact that log requests are not escaped before being exported to the relevant administration dashboard, and can be exploited by attackers to execute JavaScript code on the client side.

EPSS

0.001

Percentile

41.3%