WordPress WP Glossary plugin <= 3.1.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

2022-10-2900:00:00

Tien Nguyen Anh (Patchstack Alliance)

patchstack.com

wordpress

glossary

plugin

cross-site scripting

vulnerability

tien nguyen anh

0.001 Low

EPSS

Percentile

21.2%

JSON

Auth. Stored Cross-Site Scripting (XSS) vulnerability discovered by Tien Nguyen Anh (Patchstack Alliance) in the WordPress WP Glossary plugin (versions <= 3.1.2).

Solution

           No patched version is available. No reply from the vendor.

CPENameOperatorVersion
glossaryle3.1.2

CPE	Name	Operator	Version
	glossary	le	3.1.2

0.001 Low

EPSS

Percentile

21.2%

JSON

Related for PATCHSTACK:70C005DA29FE720602B063F363AD5FE2