Lucene search

K
osvGoogleOSV:GHSA-MG4M-V9FC-9HCC
HistoryMay 14, 2022 - 3:49 a.m.

WPGlobus plugin Stored XSS & CSRF security vulnerability

2022-05-1403:49:04
Google
osv.dev
1
wpglobus
wordpress
xss
csrf
vulnerability

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.0%

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/options.php.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.0%

Related for OSV:GHSA-MG4M-V9FC-9HCC