Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-59800
HistoryMay 09, 2022 - 12:00 a.m.

WordPress plugin LayerSlider跨站脚本漏洞

2022-05-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

25.0%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions prior to WordPress plugin LayerSlider 7.1.2. The vulnerability stems from a failure to clean and escape the slug of a project before exporting it back to various locations. An attacker could exploit this vulnerability to perform cross-site scripting attacks.

CPENameOperatorVersion
wordpress layersliderlt7.1.2

0.001 Low

EPSS

Percentile

25.0%