Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-54968
HistoryJun 15, 2022 - 12:00 a.m.

WordPress WP Athletics plugin跨站脚本漏洞

2022-06-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

24.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. WordPress WP Athletics plugin version 1.1.7 and earlier versions are vulnerable to a cross-site scripting vulnerability that results from failing to clean up parameters before storing them in the database and outputting the values back to the This vulnerability can be exploited to cause a stored cross-site scripting attack.

CPENameOperatorVersion
wordpress wp athletics pluginle1.1.7

0.001 Low

EPSS

Percentile

24.8%