Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22327
HistoryMar 16, 2022 - 12:00 a.m.

WordPress MOLIE plugin cross-site scripting vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

40.2%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress MOLIE plugin has a cross-site scripting vulnerability that stems from not escaping the course_id parameter before exporting it back to the administration dashboard, which can be exploited by attackers to conduct reflective cross-site scripting attacks.

CPENameOperatorVersion
wordpress molie pluginle0.5

0.001 Low

EPSS

Percentile

40.2%