Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-70766
HistoryMar 25, 2022 - 12:00 a.m.

WordPress Amelia Plugin Cross-Site Scripting Vulnerability

2022-03-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
14

0.001 Low

EPSS

Percentile

22.9%

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. WordPress plugin is an application plugin for WordPress. WordPress Amelia Plugin 1.0.46 and earlier versions are vulnerable to a cross-site scripting vulnerability that stems from the program’s failure to properly filter the lastName parameter in the ~/src/Application/ Controller/User/Customer/AddCustomerController.php file to filter the lastName parameter properly. An attacker could use this vulnerability to inject arbitrary web scripts.

CPENameOperatorVersion
wordpress amelia pluginle1.0.46

0.001 Low

EPSS

Percentile

22.9%