Yada Wiki < 3.4.1 - Contributor+ Stored XSS
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.5%
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
The Yada Wiki WordPress plugin before 3.4.1 did not sanitise, validate or escape the anchor attribute of its shortcode, leading to a Stored Cross-Site Scripting issue
Affected products
Unknown · Yada Wiki