User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
25Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Attendepss 0.6%
de la publicación al arma
Publicada en NVD4 oct
VulnCheck6 sept
probabilidad de explotación
0.6%top 54% de las CVE
explotación observada
síVulnCheck
The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attacks when their profile is viewed