← voltar
CVE-2021-24389CWE-79

FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 3.8%
probabilidade de exploração
3.8%top 11% das CVEs
exploração observada
nãonenhuma fonte reporta
The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability.