Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-74813
HistoryOct 31, 2022 - 12:00 a.m.

WordPress Log HTTP Requests Cross-Site Scripting Vulnerability

2022-10-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
wordpress
cross-site scripting
vulnerability
http requests
php
mysql
authentication

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

37.9%

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Log HTTP Requests plugin 1.3.1 and earlier versions, which can be exploited by an attacker to steal a victim’s cookie-based authentication credentials.

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

37.9%