Lucene search
Ran CraneWPVDB-ID:4F1D45BC-D3BD-472C-959D-05ABEFF32765HistoryMar 01, 2022 - 12:00 a.m.
Mapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site Scripting
2022-03-0100:00:00
Ran Crane
wpscan.com
6
0.001 Low
EPSS
Percentile
43.6%
The plugin does not sanitize and escape the mmursp_id parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
PoC
https://example.com/wp-admin/admin.php?page=mmursp-list&view;=edit&mmursp;_id=">
| CPE | Name | Operator | Version |
|---|---|---|---|
| mapping-multiple-urls-redirect-same-page | eq | * |
Related
cvelist
cvelist
nvd
nvd
CVE-2022-0599
2022-03-28 18:15:09
nuclei
nuclei
patchstack
patchstack
cve
cve
CVE-2022-0599
2022-03-28 18:15:09
wpexploit
wpexploit
prion
prion
Cross site scripting
2022-03-28 18:15:00