Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19820
HistoryJan 26, 2022 - 12:00 a.m.

WordPress Easy Forms for Mailchimp plugin cross-site scripting vulnerability

2022-01-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

30.0%

WordPress is a set of blogging platforms developed using the PHP language by the WordPress (Wordpress) Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of the Easy Forms for Mailchimp plugin for WordPress prior to 6.8.6, which stems from the field name and field type parameters not being cleaned up and escaped before being output back to the property. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

0.001 Low

EPSS

Percentile

30.0%