WordPress Simple Giveaways <2.36.2 - Cross-Site Scripting
WordPress Simple Giveaways plugin before 2.36.2 contains a cross-site scripting vulnerability via the method and share GET parameters of the Giveaway pages, which are not sanitized, validated, or escaped before being output back in the pages.
simple_giveawaysPoC 已收录
CVSS6.1EPSS 13.9%