Navis DocumentCloud <0.1.1 - Cross-Site Scripting
Navis DocumentCloud plugin before 0.1.1 for WordPress contains a reflected cross-site scripting vulnerability in js/window.php which allows remote attackers to inject arbitrary web script or HTML via the wpbase parameter.
navis_documentcloudPoC 已收录
CVSS4.3EPSS 6.9%