Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88213
HistorySep 28, 2022 - 12:00 a.m.

WordPress Add Shortcodes Actions And Filters Cross-Site Scripting Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
plugin
cross-site scripting
vulnerability
filtering
escaping
administrator
attack

0.001 Low

EPSS

Percentile

22.9%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Add Shortcodes Actions And Filters 2.0.9 and earlier versions are vulnerable to a cross-site scripting vulnerability caused by a lack of effective filtering and escaping of user-supplied data, which could be exploited by an authenticated (administrator) attacker to launch a cross-site scripting attack. attacks.

0.001 Low

EPSS

Percentile

22.9%