Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85532
HistoryNov 24, 2022 - 12:00 a.m.

WordPress Muffingroup Betheme theme plugin cross-site scripting vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
wordpress
muffingroup betheme
plugin
cross-site scripting
vulnerability
filtering
escaping
user-supplied data
attackers
attacks
cnvd

EPSS

0.001

Percentile

22.7%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Muffingroup Betheme theme plugin 26.6.1 and earlier versions have a cross-site scripting vulnerability, which stems from the lack of effective filtering and escaping of user-supplied data, and can be exploited by attackers to launch cross-site scripting attacks.

EPSS

0.001

Percentile

22.7%