Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting
WordPress Marmoset Viewer plugin before 1.9.3 contains a cross-site scripting vulnerability. It does not property sanitize, validate, or escape the 'id' parameter before outputting back in the page.
marmoset_viewerPoC 已收录
CVSS6.1EPSS 31.7%