Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101667
HistoryDec 19, 2021 - 12:00 a.m.

WordPress .htaccess Redirect plugin cross-site scripting vulnerability

2021-12-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
.htaccess redirect plugin
cross-site scripting
vulnerability
php
mysql
open source
application
javascript code

EPSS

0.001

Percentile

30.0%

WordPress is a set of blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. The .htaccess Redirect plugin is a WordPress open source application plugin. The WordPress .htaccess Redirect plugin suffers from a cross-site scripting vulnerability that stems from the ~/htaccess-redirect.php link parameter’s lack of validation of user-supplied data and output data filtering. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

30.0%

Related for CNVD-2021-101667