Lucene search
WpvulndbWPVDB-ID:6A36AFF8-DD7E-43C6-8125-23E6AE27BCA0HistoryAug 13, 2021 - 12:00 a.m.
WP Fountain <= 1.5.9 - Reflected Cross-Site Scripting
2021-08-1300:00:00
wpscan.com
15
0.001 Low
EPSS
Percentile
32.1%
The plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER[‘PHP_SELF’] in the ~/wp-fountain.php file which allows attackers to inject arbitrary web scripts
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-fountain | eq | * |
Related
patchstack
patchstack
prion
prion
Cross site scripting
2021-08-16 19:15:00
cve
cve
CVE-2021-34653
2021-08-16 19:15:14
cvelist
cvelist
CVE-2021-34653 WP Fountain <= 1.5.9 Reflected Cross-Site Scripting
2021-08-13 00:00:00
nvd
nvd
CVE-2021-34653
2021-08-16 19:15:14