Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56553
HistoryJun 30, 2022 - 12:00 a.m.

WordPress Limit Login Attempts plugin跨站脚本漏洞

2022-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
17

0.001 Low

EPSS

Percentile

24.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Limit Login Attempts plugin prior to 4.0.72 have a cross-site scripting vulnerability that stems from the plugin not cleaning and escaping some of its settings. An attacker with high privileges, such as an administrator, could exploit this vulnerability to execute JavaScript code on the client side.

0.001 Low

EPSS

Percentile

24.9%