Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86369
HistoryNov 30, 2022 - 12:00 a.m.

WordPress WP Affiliate Platform plugin stored cross-site scripting vulnerability

2022-11-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
wordpress
affiliate platform
cross-site scripting
vulnerability
input cleanup
output escaping
xss attacks

0.001 Low

EPSS

Percentile

22.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress plugin WP Affiliate Platform 6.3.9 and previous versions have a cross-site scripting vulnerability that stems from inadequate input cleanup and output escaping, which can be exploited by an authenticated attacker to inject cross-site code and launch XSS attacks.

0.001 Low

EPSS

Percentile

22.9%

Related for CNVD-2022-86369