Lucene search

K
wpvulndbZhongFu Su(JrXnm) of WuHan UniversityWPVDB-ID:47855D4B-9F6A-4FC7-B231-4337F51C8886
HistoryJul 18, 2022 - 12:00 a.m.

Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting

2022-07-1800:00:00
ZhongFu Su(JrXnm) of WuHan University
wpscan.com
17
plugin
reflected cross-site scripting
parameter sanitisation

EPSS

0.001

Percentile

40.2%

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

PoC

EPSS

0.001

Percentile

40.2%

Related for WPVDB-ID:47855D4B-9F6A-4FC7-B231-4337F51C8886