Lucene search
WpvulndbWPVDB-ID:52F25EC3-18A0-46BC-B0DC-A1E721342436HistoryMay 25, 2022 - 12:00 a.m.
Private Messages For WordPress <= 2.1.10 - Subscriber+ Stored Cross-Site Scripting
2022-05-2500:00:00
wpscan.com
10
wordpress
xss
plugin
security
EPSS
0.001
Percentile
22.7%
The plugin does not sanitise and escape some parameters, which could allow users with a role as low as subscriber to perform Stored Cross-Site Scripting attacks
Related
prion
prion
Cross site scripting
2022-06-15 16:15:00
cvelist
cvelist
nvd
nvd
CVE-2022-29442
2022-06-15 16:15:08
cnvd
cnvd
WordPress Private Messages plugin跨站脚本漏洞
2022-06-17 00:00:00
patchstack
patchstack
cve
cve
CVE-2022-29442
2022-06-15 16:15:08