WordPress underConstruction cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress underConstruction plugin in version 1.18...

CVE-2021-39320

The underConstruction plugin = 1.18 for WordPress echoes out the raw value of "$GLOBALS'PHPSELF'" in the ucOptions.php file. On certain configurations including Apache+modPHP, this makes it possible to use it to perform a reflected Cross-Site Scripting attack by injecting malicious code in the...

CVE-2021-39320: Improper Neutralization of Input During Web Page Generation

The underConstruction plugin = 1.18 for WordPress echoes out the raw value of $GLOBALS'PHPSELF' in the ucOptions.php file. On certain configurations including Apache+modPHP, this makes it possible to use it to perform a reflected Cross-Site Scripting attack by injecting malicious code in the...

PT-2021-22530

Name of the Vulnerable Software and Affected Versions: underConstruction plugin versions = 1.18 for WordPress Description: The issue allows for a reflected Cross-Site Scripting attack by injecting malicious code in the request path on certain configurations, including Apache+modPHP. This is...