Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-76228
HistoryMar 31, 2022 - 12:00 a.m.

Wordpress Plugin All-in-one Floating Contact Form Cross-Site Scripting Vulnerability

2022-03-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
wordpress
plugin
cross-site scripting
vulnerability
php
mysql
xss
attack
exploited

EPSS

0.001

Percentile

50.4%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. wordpress Plugin All-in-one Floating Contact Form 2.0.4 previous versions of the cross-site scripting vulnerability, an attacker can The vulnerability can be exploited by an attacker to reflect XSS on the my-sticky-elements-leads administration page.

EPSS

0.001

Percentile

50.4%