WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. The WordPress Plugin suffers from a cross-site scripting vulnerability that stems from the...

PT-2021-22550 · WordPress · Mpl-Publisher

Name of the Vulnerable Software and Affected Versions: MPL-Publisher WordPress plugin versions up to and including 1.30.2 Description: The issue arises from insufficient input validation and sanitization via several parameters found in the /libs/PublisherController.php file, allowing attackers wi...