Lucene search

K
wpvulndbWpvulndbWPVDB-ID:9957EBF1-9970-45EA-8AB1-32315948F4F6
HistoryNov 03, 2023 - 12:00 a.m.

Your Journey theme <= 1.9.8 - Reflected Cross-Site Scripting via Prototype Pollution

2023-11-0300:00:00
wpscan.com
2
journey
plugin
vulnerability
reflected cross-site scripting
prototype pollution

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Description The plugin does not properly sanitize input and escape output, resulting in a vulnerability to Reflected Cross-Site Scripting via prototype pollution. This could lead to the injection of arbitrary web scripts in pages that execute when a user is tricked into performing an action like clicking a link.

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.7%

Related for WPVDB-ID:9957EBF1-9970-45EA-8AB1-32315948F4F6