Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54967
HistoryJun 15, 2022 - 12:00 a.m.

WordPress WP Admin Style plugin跨站脚本漏洞

2022-06-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

25.0%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Admin Style plugin version 0.1.2 and prior versions contain a cross-site scripting vulnerability that stems from the plugin’s failure to clean up and escape certain of its settings. An attacker could exploit this vulnerability to execute a stored cross-site scripting attack when the unfiltered_html feature is disabled.

CPENameOperatorVersion
wordpress wp admin style pluginle0.1.2

0.001 Low

EPSS

Percentile

25.0%