Lucene search

K
wpvulndbWpvulndbWPVDB-ID:9131C973-3F6C-4C9E-B444-6CFB2F8C553D
HistoryAug 13, 2021 - 12:00 a.m.

WP Songbook <= 2.0.11 - Reflected Cross-Site Scripting

2021-08-1300:00:00
wpscan.com
14

0.001 Low

EPSS

Percentile

32.1%

The plugin is vulnerable to Reflected Cross-Site Scripting via the url parameter found in the ~/inc/class.ajax.php file which allows attackers to inject arbitrary web scripts

CPENameOperatorVersion
wp-songbookeq*

0.001 Low

EPSS

Percentile

32.1%

Related for WPVDB-ID:9131C973-3F6C-4C9E-B444-6CFB2F8C553D