Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57173
HistoryJun 22, 2022 - 12:00 a.m.

WordPress Ocean Extra plugin跨站脚本漏洞

2022-06-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
19
wordpress
ocean extra
cross-site scripting
vulnerability
javascript
php
blogging platform

EPSS

0.001

Percentile

43.5%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions prior to WordPress Ocean Extra plugin 1.9.5, which stems from the plugin’s failure to escape generated links. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

43.5%