Lucene search

K
wpvulndbJrXnmWPVDB-ID:8E53F15E-8B6A-4D47-A40D-4EBBE6934286
HistoryNov 18, 2021 - 12:00 a.m.

Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting

2021-11-1800:00:00
JrXnm
wpscan.com
7

0.001 Low

EPSS

Percentile

25.0%

The plugin does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard

PoC

CPENameOperatorVersion
child-theme-generatoreq*

0.001 Low

EPSS

Percentile

25.0%

Related for WPVDB-ID:8E53F15E-8B6A-4D47-A40D-4EBBE6934286