WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting
WordPress Embed Swagger plugin 1.0.0 and prior contains a reflected cross-site scripting vulnerability due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file, which allows attackers to inject arbitrary web scripts onto the page.
embed_swaggerPoC 已收录
CVSS6.1EPSS 7.8%