Lucene search

K
wpvulndbKrzysztof ZającWPVDB-ID:40F36692-C898-4441-AD24-2DC17856BD74
HistoryFeb 09, 2022 - 12:00 a.m.

Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)

2022-02-0900:00:00
Krzysztof Zając
wpscan.com
7

0.001 Low

EPSS

Percentile

41.5%

The plugin is affected by a Reflected Cross-Site Scripting (XSS) vulnerability.

PoC

http://127.0.0.1:8001/wp-admin/edit.php?post_type=ditty&amp;page;=ditty_settings&amp;tab;="><img+src+onerror%3Dalert(1)>

CPENameOperatorVersion
ditty-news-tickerlt3.0.15

0.001 Low

EPSS

Percentile

41.5%

Related for WPVDB-ID:40F36692-C898-4441-AD24-2DC17856BD74