Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68898
HistoryApr 07, 2022 - 12:00 a.m.

WordPress Insights from Google PageSpeed plugin cross-site scripting vulnerability

2022-04-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
google pagespeed
cross-site scripting

EPSS

0.001

Percentile

30.0%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Insights from Google PageSpeed plugin has a cross-site scripting vulnerability that stems from the fact that various parameters are exported back to the The plugin does not clean up and escape the properties of the dashboard before setting them. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

30.0%