Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87379
HistoryOct 11, 2022 - 12:00 a.m.

WordPress WP Socializer Cross-Site Scripting Vulnerability

2022-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
wp socializer
cross-site scripting
vulnerability
php
quiz and survey master
unfiltered html
xss attack
wordpress foundation
administrator

EPSS

0.001

Percentile

24.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. Quiz And Survey Master plugin is an online survey plugin used in it. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress WP Socializer prior to 7.3, which stems from not cleaning and escaping some of its settings, even when unfiltered_html feature is disabled, a highly privileged attacker such as an administrator can use the vulnerability to inject cross-site code and launch XSS attacks.

EPSS

0.001

Percentile

24.8%