Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-74813
HistoryOct 31, 2022 - 12:00 a.m.

WordPress Log HTTP Requests Cross-Site Scripting Vulnerability

2022-10-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
wordpress
cross-site scripting
vulnerability
http requests
php
mysql
authentication

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Log HTTP Requests plugin 1.3.1 and earlier versions, which can be exploited by an attacker to steal a victim’s cookie-based authentication credentials.

CPENameOperatorVersion
wordpress log http requestsle1.3.1

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%