Lucene search

K
wpvulndbWpvulndbWPVDB-ID:B4BBC558-7EFF-493F-897A-E3843D7843D7
HistoryMay 04, 2020 - 12:00 a.m.

wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via User Agent

2020-05-0400:00:00
wpscan.com
10

0.001 Low

EPSS

Percentile

37.3%

The plugin did not escape, validate or escape the User Agent header before outputting back in the page, leading to a reflected Cross-Site Scripting issue

CPENameOperatorVersion
wpforolt1.7.0

0.001 Low

EPSS

Percentile

37.3%

Related for WPVDB-ID:B4BBC558-7EFF-493F-897A-E3843D7843D7