WordPress Cross-Site Scripting Vulnerability (CNVD-2022-11214)

WordPress is a blogging platform developed by the WordPress (Wordpress) Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. cross-site scripting vulnerability exists in the WordPress plugin, which stems from the vulnerability of the Yasr-Yet Another Stars Rating plugin at the parameter source. No detailed vulnerability details are available.