Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-66620
HistoryMar 16, 2022 - 12:00 a.m.

WordPress Patreon plugin cross-site scripting vulnerability

2022-03-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
wordpress
patreon plugin
cross-site scripting
vulnerability
php language
version 1.8.2
custom patreon page name
attack

EPSS

0.001

Percentile

21.4%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. Cross-site scripting vulnerabilities exist in versions of the WordPress Patreon plugin prior to 1.8.2, which stem from the plugin’s failure to clean and escape the " Custom Patreon Page Name" field. An attacker could exploit this vulnerability to perform cross-site scripting attacks.

EPSS

0.001

Percentile

21.4%