Lucene search
WpvulndbWPVDB-ID:D3366099-C920-4048-B07A-3E7F4B3F8CFFHistorySep 08, 2021 - 12:00 a.m.
User Activation Email <= 1.3.0 - Reflected Cross-Site Scripting
2021-09-0800:00:00
wpscan.com
11
user activation email
cross-site scripting
vulnerability
EPSS
0.001
Percentile
31.9%
The plugin is vulnerable to Reflected Cross-Site Scripting via the uae-key parameter found in the ~/user-activation-email.php file which allows attackers to inject arbitrary web scripts
Related
patchstack
patchstack
cvelist
cvelist
CVE-2021-38325 User Activation Email <= 1.3.0 Reflected Cross-Site Scripting
2021-09-09 18:10:32
cve
cve
CVE-2021-38325
2021-09-09 19:15:14
nvd
nvd
CVE-2021-38325
2021-09-09 19:15:14
prion
prion
Cross site scripting
2021-09-09 19:15:00