Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101990
HistoryDec 18, 2021 - 12:00 a.m.

WordPress Display Post Metadata plugin cross-site scripting vulnerability

2021-12-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
wordpress
display post metadata
cross-site scripting
php
mysql
data validation
javascript
client side

EPSS

0.001

Percentile

24.8%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. display Post Metadata plugin is a WordPress open source application plugin. WordPress Display Post Metadata plugin in versions prior to 1.5.0 has a cross-site scripting vulnerability that stems from the lack of a user The vulnerability is caused by a lack of data validation filtering of user-supplied data and output. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%