Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87354
HistoryOct 12, 2022 - 12:00 a.m.

WordPress Cryptocurrency Pricing list and Ticker Cross-Site Scripting Vulnerability

2022-10-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
wordpress
cryptocurrency
pricing list
ticker
cross-site scripting
vulnerability
php
reflection-based attack

EPSS

0.001

Percentile

40.2%

WordPress and WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Cryptocurrency Pricing list and Ticker 1.5 and earlier versions have a cross-site scripting vulnerability, which is caused by the ccpw_setpage parameter not being cleaned and escaped before returning short code pages, and can be used by attackers to launch a reflection-based cross-site scripting attack.

EPSS

0.001

Percentile

40.2%

Related for CNVD-2022-87354