Lucene search
Krzysztof ZającWPVDB-ID:4AAE2DD9-8D51-4633-91BC-DDB53CA3471CHistoryJan 27, 2022 - 12:00 a.m.
WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
2022-01-2700:00:00
Krzysztof Zając
wpscan.com
7
0.001 Low
EPSS
Percentile
41.6%
The plugin does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| whmcs-bridge | lt | 6.4b |
Related
prion
prion
Cross site scripting
2022-02-28 09:15:00
nvd
nvd
CVE-2021-25112
2022-02-28 09:15:08
cve
cve
CVE-2021-25112
2022-02-28 09:15:08
cvelist
cvelist
CVE-2021-25112 WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
2022-02-28 09:06:36
patchstack
patchstack
wpexploit
wpexploit
WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)
2022-01-27 00:00:00
nuclei
nuclei
WordPress WHMCS Bridge <6.4b - Cross-Site Scripting
2022-03-27 14:25:03
cnvd
cnvd
WordPress WHMCS Bridge plugin cross-site scripting vulnerability
2022-03-02 00:00:00