Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-24935
HistoryDec 06, 2021 - 4:15 p.m.

Cross site scripting

2021-12-0616:15:00
PRIOn knowledge base
www.prio-n.com
1

0.001 Low

EPSS

Percentile

30.0%

The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Reflected Cross-Site Scripting issues

CPENameOperatorVersion
wp_google_fontslt3.1.5

0.001 Low

EPSS

Percentile

30.0%

Related for PRION:CVE-2021-24935