2 matches found
CVE-2021-34654
The Custom Post Type Relations WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the cptrname parameter found in the /pages/admin-page.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0...
6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References2
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugins is an open source application plugin for WordPress. WordPress Plugins The Custom Post Type...
6.1CVSS6.1AI score0.00844EPSS
SaveExploits1References3
20