Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86542
HistoryOct 10, 2021 - 12:00 a.m.

Wordpress Zoho CRM Lead Magnet plugin cross-site scripting vulnerability

2021-10-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
wordpress
zoho crm
cross-site scripting

EPSS

0.001

Percentile

47.6%

WordPress is the Wordpress Foundation’s suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in Wordpress Zoho CRM Lead Magnet plugin version 1.7.2.4, which stems from a lack of checksum filtering of user-supplied data and output data. An attacker could use this vulnerability to execute JavaScript code on the client side.

EPSS

0.001

Percentile

47.6%

Related for CNVD-2022-86542