Lucene search
WordfenceCVELIST:CVE-2021-34644HistoryAug 16, 2021 - 6:22 p.m.
CVE-2021-34644 Multiplayer Games <= 3.7 Reflected Cross-Site Scripting
2021-08-1618:22:21
CWE-79
Wordfence
www.cve.org
3
multiplayer games
wordpress plugin
cve-2021-34644
reflected cross-site scripting
$_server['php_self']
injection
arbitrary web scripts
version 3.7
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.7%
The Multiplayer Games WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER[‘PHP_SELF’] in the ~/multiplayergames.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.7.
CNA Affected
[
{
"product": "Multiplayer Games",
"vendor": "Multiplayer Games",
"versions": [
{
"lessThanOrEqual": "3.7",
"status": "affected",
"version": "3.7",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-34644
2021-08-16 19:15:14
prion
prion
Cross site scripting
2021-08-16 19:15:00
cve
cve
CVE-2021-34644
2021-08-16 19:15:14
wpvulndb
wpvulndb
Multiplayer Games <= 3.7 - Reflected Cross-Site Scripting
2021-08-13 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.7%
Related for CVELIST:CVE-2021-34644