WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. The WordPress Plugin suffers from a cross-site scripting vulnerability that stems from the...

CVE-2021-39343: Improper Neutralization of Input During Web Page Generation

The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /libs/PublisherController.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in...

PT-2021-22550 · WordPress · Mpl-Publisher

Name of the Vulnerable Software and Affected Versions: MPL-Publisher WordPress plugin versions up to and including 1.30.2 Description: The issue arises from insufficient input validation and sanitization via several parameters found in the /libs/PublisherController.php file, allowing attackers wi...