Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86377
HistoryDec 06, 2022 - 12:00 a.m.

WordPress reCAPTCHA plugin cross-site scripting vulnerability

2022-12-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
wordpress
recaptcha
plugin
vulnerability
cross-site scripting

EPSS

0.001

Percentile

24.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress reCAPTCHA plugin 1.6 and earlier versions have a cross-site scripting vulnerability, which stems from the failure to clean up and escape some settings, and can be exploited by an attacker with higher privileges, such as an administrator, to launch a stored cross-site scripting attack.

EPSS

0.001

Percentile

24.8%