Cross site scripting

2023-11-1422:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

unauthenticated

reflected

php 8.x

codebard

patron button

nvd

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability (requires PHP 8.x) in CodeBard CodeBard’s Patron Button and Widgets for Patreon plugin <= 2.1.9 versions.

CPENameOperatorVersion
patron_button_and_widgets_for_patreonle2.1.9

CPE	Name	Operator	Version
	patron_button_and_widgets_for_patreon	le	2.1.9

References

patchstack.com/database/vulnerability/patron-button-and-widgets-by-codebard/wordpress-codebard-s-patron-button-and-widgets-for-patreon-plugin-2-1-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve