1 matches found
WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting Detection
WordPress Embed Swagger plugin 1.0.0 and prior contains a reflected cross-site scripting vulnerability due to insufficient escaping/sanitization and validation via the url parameter found in the /swagger-iframe.php file, which allows attackers to inject arbitrary web scripts onto the page...
6.1CVSS6.1AI score0.03865EPSS
SaveExploits3References6
20