Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68915
HistoryAug 05, 2021 - 12:00 a.m.

WordPress The Any Hostname plugin cross-site scripting vulnerability

2021-08-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

24.9%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. the Any Hostname plugin is a WordPress application plugin. the WordPress The Any Hostname plugin 1.0.6 and earlier versions have a cross-site scripting vulnerability that stems from the plugin’s failure to clean up or evade its “Allowed hosts” setting. An attacker could exploit this vulnerability to cause a stored XSS issue.

0.001 Low

EPSS

Percentile

24.9%