Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54904
HistoryJul 26, 2022 - 12:00 a.m.

WordPress Testimonials plugin跨站脚本漏洞

2022-07-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
wordpress
testimonials
plugin
cross-site scripting
vulnerability
data validation
filtering
authenticated attacker
javascript code

EPSS

0.001

Percentile

19.4%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Testimonials plugin is vulnerable to a cross-site scripting vulnerability that stems from the program’s lack of data validation filtering of user-supplied data and output. An authenticated attacker could exploit the vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

19.4%