PRODUCT PROFILE

woody_ad_snippets

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危2023/11/27

WordPress Woody Code Snippets <2.4.6 - Cross-Site Scripting

WordPress Woody Code Snippets plugin before 2.4.6 contains a cross-site scripting vulnerability. It does not escape generated URLs before outputting them back in an attribute.

woody_ad_snippetsPoC 已收录

CVSS7.2

高危CVE-2019-158582019/09/03

WordPress Woody Ad Snippets <2.2.5 - Cross-Site Scripting/Remote Code Execution

WordPress Woody Ad Snippets prior to 2.2.5 is susceptible to cross-site scripting and remote code execution via admin/includes/class.import.snippet.php, which allows unauthenticated options import as demonstrated by storing a cross-site scripting payload for remote code execution.

woody_ad_snippetsPoC 已收录

CVSS8.8EPSS 59.6%