PRODUCT PROFILE

Widget4Call

Created from vulnerability 17857 relation agent

关联漏洞

共找到 1 条公开漏洞记录

中危CVE-2024-130992026/02/26

Widget4Call WordPress - Cross-Site Scripting

Widget4Call WordPress plugin <= 1.0.7 contains a reflected cross-site scripting caused by unsanitized parameter output in the page, letting attackers execute arbitrary scripts in the context of high privilege users, exploit requires attacker to craft a malicious URL.

Widget4CallPoC 已收录

CVSS—