Advanced Text Widget < 2.0.2 - Cross-Site Scripting
A cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
advanced_text_widget_pluginPoC 已收录
CVSS4.3EPSS 4.7%