TS Webfonts for さくらのレンタルサーバ < 3.1.1 - Admin+ Stored Cross-Site Scripting

2023-11-1000:00:00

wpscan.com

ts webfonts

cross-site scripting

admin role

multi-site instances

security vulnerability

sanitization missing

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.8%

JSON

Description The plugin does not sanitise and escape some parameters, which could allow users with a role of Admin to perform Cross-Site Scripting attacks, for example on multisite instances.

CPENameOperatorVersion
ts-webfonts-for-sakuraeq3.1.1

CPE	Name	Operator	Version
	ts-webfonts-for-sakura	eq	3.1.1