Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-21729
HistoryMar 02, 2022 - 12:00 a.m.

WordPress WHMCS Bridge plugin cross-site scripting vulnerability

2022-03-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.001 Low

EPSS

Percentile

41.6%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. cross-site scripting vulnerability exists in versions of WordPress WHMCS Bridge plugin prior to 6.4b, which stems from the fact that the plugin does not clean up and escape error parameters before outputting them back to the administration dashboard, which can be exploited by attackers to perform cross-site scripting attacks.

0.001 Low

EPSS

Percentile

41.6%