Lucene search
China National Vulnerability DatabaseCNVD-2024-02731HistoryJan 16, 2024 - 12:00 a.m.
WordPress Plugin WCFM Marketplace Cross-Site Scripting Vulnerability
2024-01-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
wordpress
wcfm marketplace
cross-site scripting
vulnerability
php
mysql
filtering
escaping
web script
html
injection
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin WCFM Marketplace, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to execute arbitrary web script or HTML by injecting a crafted payload.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress wcfm marketplace plugin | le | 3.6.2 |
Related
nvd
nvd
CVE-2023-4960
2024-01-11 09:15:46
cve
cve
CVE-2023-4960
2024-01-11 09:15:46
prion
prion
Cross site scripting
2024-01-11 09:15:00
wpvulndb
wpvulndb
cvelist
cvelist
CVE-2023-4960
2024-01-11 08:33:09
wordfence
wordfence