Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-102009
HistoryNov 29, 2021 - 12:00 a.m.

WordPress Awesome Support plugin cross-site scripting vulnerability

2021-11-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
wordpress
php
mysql
cross-site scripting
vulnerability
client-side

EPSS

0.001

Percentile

22.7%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the erection of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Awesome Support plugin in 6.0.6 and its previous versions have cross-site scripting vulnerabilities, the vulnerability stems from the plugin for the parameter id, assignee missing for user-supplied data and output data checksum filtering. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

22.7%

Related for CNVD-2021-102009