Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-103568
HistoryOct 28, 2021 - 12:00 a.m.

WordPress Special Text Boxes plugin cross-site scripting vulnerability

2021-10-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
wordpress
php
mysql
cross-site scripting
vulnerability
javascript
client side

EPSS

0.001

Percentile

24.8%

WordPress is the WordPress Foundation’s suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress Special Text Boxes plugin in versions prior to 5.9.109 suffers from a cross-site scripting vulnerability that stems from a lack of checksum filtering of user-supplied and output data. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

24.8%