Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-69137
HistoryJul 07, 2021 - 12:00 a.m.

WordPress WP Offload SES Lite plugin cross-site scripting vulnerability

2021-07-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.001 Low

EPSS

Percentile

24.8%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress WP Offload SES Lite plugin prior to 1.4.5, which stems from the plugin’s failure to escape certain fields in the “activity” page of the admin dashboard such as the email id, subject and recipient. An attacker could exploit this vulnerability to cause a stored cross-site scripting issue.

0.001 Low

EPSS

Percentile

24.8%