Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88224
HistorySep 28, 2022 - 12:00 a.m.

WordPress NOTICE BOARD plugin cross-site scripting vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
wordpress
notice board
cross-site scripting
php
mysql
vulnerability
filtering
escaping
attackers

0.001 Low

EPSS

Percentile

22.7%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited by attackers to launch cross-site scripting attacks.

CPENameOperatorVersion
wordpress notice board pluginle1.1

0.001 Low

EPSS

Percentile

22.7%