Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-58230
HistoryJul 06, 2022 - 12:00 a.m.

WordPress Ninja Forms Contact Form plugin跨站脚本漏洞(CNVD-2022-58230)

2022-07-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
wordpress
ninja forms
cross-site scripting
vulnerability
cnvd-2022-58230
php
attack

EPSS

0.001

Percentile

24.8%

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site scripting vulnerability exists in versions of WordPress Ninja Forms Contact Form plugin prior to version 3.6.10, which stems from a failure to sort and escape some imported data. An attacker could exploit this vulnerability to perform cross-site scripting attacks.

EPSS

0.001

Percentile

24.8%