Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-22330
HistoryMar 16, 2022 - 12:00 a.m.

WordPress Cybersoldier Cross-Site Scripting Vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

24.9%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in WordPress Cybersoldier, which stems from not cleaning and escaping URL settings before exporting them to properties, and can be exploited by a highly privileged attacker to perform cross site scripting attacks.

CPENameOperatorVersion
wordpress cyber​​soldierlt1.7.0

0.001 Low

EPSS

Percentile

24.9%

Related for CNVD-2022-22330