Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-2189
HistoryJul 25, 2022 - 1:15 p.m.

Cross site scripting

2022-07-2513:15:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

40.3%

The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER[‘REQUEST_URI’] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

CPENameOperatorVersion
wp_video_lightboxlt1.9.5

0.001 Low

EPSS

Percentile

40.3%

Related for PRION:CVE-2022-2189