WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting
WordPress 2kb Amazon Affiliates Store plugin before 2.1.1 contains multiple cross-site scripting vulnerabilities. The plugin allows an attacker to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in the kbAmz page to wp-admin/admin.php, thus making possible theft of cookie-based authentication credentials and launch of other attacks.
2kb_amazon_affiliates_storePoC 已收录
CVSS6.1EPSS 0.87%