Lucene search

K
wpvulndbWpvulndbWPVDB-ID:7DBB8AF6-E352-4588-B61E-AEA14E3D998B
HistoryAug 13, 2021 - 12:00 a.m.

TypoFR <= 0.11 - Reflected Cross-Site Scripting

2021-08-1300:00:00
wpscan.com
19
typofr
vulnerability
reflected cross-site scripting
text function
org_heigl
hyphenator
index.php
arbitrary web scripts

EPSS

0.001

Percentile

31.9%

The plugin is vulnerable to Reflected Cross-Site Scripting via the text function found in the ~/vendor/Org_Heigl/Hyphenator/index.php file which allows attackers to inject arbitrary web scripts

EPSS

0.001

Percentile

31.9%

Related for WPVDB-ID:7DBB8AF6-E352-4588-B61E-AEA14E3D998B