Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88258
HistorySep 28, 2022 - 12:00 a.m.

WordPress SEO Smart Links Cross-Site Scripting Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
26
wordpress
php
cross-site scripting
vulnerability
administrator
attack
plugin
foundation
blogging platform
exploit
settings

EPSS

0.001

Percentile

24.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress SEO Smart Links 3.0.1 and previous versions have a cross-site scripting vulnerability that stems from not cleaning and escaping some of its settings, which can be exploited by a highly privileged attacker such as an administrator to launch a cross-site scripting attack.

EPSS

0.001

Percentile

24.8%