Lucene search

K
wpvulndbWpvulndbWPVDB-ID:8B8B97C0-A74C-4067-8EAD-46ADFE45264A
HistoryJul 09, 2019 - 12:00 a.m.

Simple Link Directory < 7.3.5 - Cross-Site Scripting (XSS)

2019-07-0900:00:00
wpscan.com
9

0.001 Low

EPSS

Percentile

47.2%

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html is not called for the β€˜echo get_the_title()’ or β€˜echo $term->name’ statement.

CPENameOperatorVersion
simple-link-directorylt7.3.5

0.001 Low

EPSS

Percentile

47.2%

Related for WPVDB-ID:8B8B97C0-A74C-4067-8EAD-46ADFE45264A