Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the "role" GET parameter before echoing it back out to the user. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WP Admin Menu跨站脚本漏洞
Vulnerability Description
WP Admin Menu是个人开发者的一个流行的Wordpress插件。该插件可以在页面顶部创建管理菜单。 WP Plugin Rednumber Admin Menu 版本 v1.1 及之前版本存在该漏洞，该漏洞源于GET请求的RESPONSE中没有去除 role 敏感信息，攻击者可利用该漏洞引起跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A