Essential Real Estate - Cross Site Scripting
The plugin does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.
essential_real_estatePoC 已收录
CVSS5.4EPSS 24.8%
共找到 1 条公开漏洞记录
The plugin does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.