Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22324
HistoryMar 16, 2022 - 12:00 a.m.

WordPress Meks Easy Photo Feed Widget Cross-Site Scripting Vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

24.8%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Meks Easy Photo Feed Widget has a cross-site scripting vulnerability that can be exploited by any authenticated attacker to update the plugin’s settings and put a cross-site scripting payload into it.

0.001 Low

EPSS

Percentile

24.8%