漏洞描述
The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
wpscan.comhttps://wpscan.com/vulnerability/5e1cefd5-5369-44bd-aef7-2a382c8d8e33↗wordpress.orghttps://wordpress.org/plugins/ultimate-faqs/↗plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/changeset/2222959/ultimate-faqs/tags/1.8.30/Shortcodes/DisplayFAQs.php↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2020-7107↗wordpress.orghttps://wordpress.org/plugins/ultimate-faqs/#developers↗