WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting
WordPress Accessibility Helper plugin before 0.6.0.7 contains a cross-site scripting vulnerability. It does not sanitize and escape the wahi parameter before outputting back its base64 decode value in the page.
wp_accessibility_helperPoC 已收录
CVSS6.1EPSS 1.3%