The پلاگین پرداخت دلخواه WordPress... CVE-2022-4307

- AV AC AU C I A
发布： 2023-01-23
修订： 2024-11-21

The پلاگین پرداخت دلخواه WordPress plugin before 2.9.3 does not sanitise and escape some parameters, allowing unauthenticated attackers to send a request with XSS payloads, which will be triggered when a high privilege users such as admin visits a page from the plugin.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息