Lucene search
+L

3 matches found

NVD
NVD
•added 2022/01/18 5:15 p.m.•25 views

CVE-2022-0232

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loadertext parameter found in the /includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary we...

4.8CVSS0.00856EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/18 12:00 a.m.•2 views

CVE-2022-0232: Improper Neutralization of Input During Web Page Generation

The User Registration, Login & Landing Pages WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the loadertext parameter found in the /includes/templates/landing-page.php file which allows attackers with administrative user access to inject arbitrary we...

4.8CVSS5.7AI score0.00856EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/01/18 12:00 a.m.•17 views

WordPress plugin 跨站脚本漏洞

WordPress plugin is an open source application plugin for WordPress. WordPress plugin suffers from a cross-site scripting vulnerability that stems from insufficient escaping via the loadertext parameter in the /includes/templates/landing-page.php file, which allows an attacker with administrative...

4.8CVSS5.1AI score0.00856EPSS
SaveExploits1References4
Rows per page
Query Builder