WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting
WordPress Panda Pods Repeater Field before 1.5.4 contains a cross-site scripting vulnerability. The plugin does not sanitize and escape a parameter before outputting it back in the page. This can be leveraged against a user who has at least Contributor permission. An attacker can also steal cookie-based authentication credentials and launch other attacks.
panda_pods_repeater_fieldPoC 已收录
CVSS5.4EPSS 8.3%