Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-06871
HistoryFeb 16, 2022 - 12:00 a.m.

WordPress Remove Footer Credit plugin cross-site scripting vulnerability

2022-02-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
wordpress
footer credit plugin
cross-site scripting
vulnerability
php
mysql
settings
unfiltered html

EPSS

0.001

Percentile

21.4%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin for WordPress. WordPress Remove Footer Credit plugin versions prior to 1.0.11 have a cross-site scripting vulnerability that stems from the fact that the plugin does properly clean up its settings, even when unfiltered_html is disabled. A highly privileged attacker could exploit this vulnerability to perform cross-site scripting attacks.

EPSS

0.001

Percentile

21.4%