Lucene search

K
wpvulndbWpvulndbWPVDB-ID:48EC30D6-8B40-4D2A-A1F9-A24FCD0522CD
HistorySep 23, 2022 - 12:00 a.m.

FontMeister <= 1.08 - Reflected Cross-Site Scripting

2022-09-2300:00:00
wpscan.com
8
fontmeister
plugin
xss
vulnerability

0.001 Low

EPSS

Percentile

33.7%

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CPENameOperatorVersion
fontmeistereq*

0.001 Low

EPSS

Percentile

33.7%

Related for WPVDB-ID:48EC30D6-8B40-4D2A-A1F9-A24FCD0522CD