2 matches found
CVE-2021-34644: Improper Neutralization of Input During Web Page Generation
The Multiplayer Games WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $SERVER'PHPSELF' in the /multiplayergames.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.7...
6.1CVSS5.8AI score0.00938EPSS
SaveExploits1References3
PT-2021-20612
Name of the Vulnerable Software and Affected Versions: Multiplayer Games WordPress plugin versions up to and including 3.7 Description: The issue is related to Reflected Cross-Site Scripting, which occurs due to the use of $ SERVER'PHP SELF' in the /multiplayergames.php file. This allows attacker...
6.1CVSS0.00938EPSS
SaveExploits1References6
20