Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55701
HistoryJun 15, 2022 - 12:00 a.m.

WordPress Mitsol Social Post Feed plugin跨站脚本漏洞

2022-06-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
wordpress
mitsol social post feed
plugin
cross-site scripting
vulnerability
php
javascript
id parameter
client side
exploit

EPSS

0.001

Percentile

22.7%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Mitsol Social Post Feed plugin version 1.10 and earlier is vulnerable to a cross-site scripting vulnerability, which stems from insufficient input cleanup and output escaping on the ID parameter. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

22.7%

Related for CNVD-2022-55701