Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57430
HistoryMay 18, 2022 - 12:00 a.m.

WordPress Cliprs plugin cross-site scripting vulnerability

2022-05-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
cliprs plugin
cross-site scripting
api key

EPSS

0.001

Percentile

36.0%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Cliprs plugin 1.2.3 and earlier versions have a cross-site scripting vulnerability that stems from a failure to clean up and escape its API key settings before exporting it to properties, and an attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

36.0%