Lucene search

K
wpvulndbWpvulndbWPVDB-ID:E578F8F7-133C-40C9-9128-8B423C9B66CF
HistoryMar 14, 2023 - 12:00 a.m.

Tags Cloud Manager <= 1.0.0 - Reflected XSS

2023-03-1400:00:00
wpscan.com
4
tags cloud manager
plugin vulnerability
reflected xss
unauthenticated users
malicious scripts
software

EPSS

0.001

Percentile

18.8%

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against ??? [high privilege users such as admin|only unauthenticated users]

EPSS

0.001

Percentile

18.8%

Related for WPVDB-ID:E578F8F7-133C-40C9-9128-8B423C9B66CF