Lucene search
K

5 matches found

OSV
OSV
added 2021/09/10 2:15 p.m.2 views

CVE-2021-38339

The Simple Matted Thumbnails WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /simple-matted-thumbnail.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.01...

6.1CVSS5.8AI score0.0021EPSS
Exploits1References2
CVE
CVE
added 2021/09/10 1:34 p.m.45 views

CVE-2021-38339

The CVE-2021-38339 entry affects the WordPress plugin Simple Matted Thumbnails, version ≤ 1.01. The vulnerability is a Reflected Cross-Site Scripting flaw caused by a reflected value in $_SERVER["PHP_SELF"] within the simple-matted-thumbnail.php file, enabling an attacker to inject arbitrary web ...

6.1CVSS6AI score0.0021EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2021/09/10 1:34 p.m.6 views

CVE-2021-38339 Simple Matted Thumbnails <= 1.01 Reflected Cross-Site Scripting

The Simple Matted Thumbnails WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /simple-matted-thumbnail.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.01...

6.1CVSS6.1AI score0.0021EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/09/10 12:0 a.m.2 views

WordPress 插件 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. WordPress Simple Matted Thumbnails suffers fr...

6.1CVSS6.1AI score0.0021EPSS
Exploits1References4
Patchstack
Patchstack
added 2021/09/09 12:0 a.m.19 views

WordPress Simple Matted Thumbnails plugin <= 1.01 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress Simple Matted Thumbnails plugin versions = 1.01. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...

6.1CVSS2.6AI score0.0021EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder