Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-57620
HistoryJun 30, 2022 - 12:00 a.m.

WordPress Pricing Tables plugin跨站脚本漏洞

2022-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

36.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress Pricing Tables plugin prior to 3.2.1, which stems from the fact that the plugin does not filter or escape parameters when specific settings are enabled. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
wordpress pricing tables pluginlt3.2.1

0.001 Low

EPSS

Percentile

36.9%