Lucene search
+L

3 matches found

WPVulnDB
WPVulnDB
added 2024/05/16 12:00 a.m.18 views

Debug Info <= 1.3.10 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The Debug Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

5.9CVSS5.9AI score0.00274EPSS
SaveExploits0References1
Rows per page
Query Builder