System Dashboard < 2.8.10 - XSS via Header Injection
28Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 5.4epss 0.8%
probabilidad de explotación
0.8%top 46% de las CVE
explotación observada
noninguna fuente lo reporta
The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Productos afectados
Unknown · System Dashboard