Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)
Vulnerability Description
The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET parameters before outputting them back in an admin page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
WordPress 插件跨站脚本漏洞
Vulnerability Description
WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress 插件是WordPress开源的一个应用插件。 The Community Events WordPress Plugin存在安全漏洞，该漏洞源于1.4.8版本之前的此插件在将其输出到管理页面之前，没有对其importrowscount和successimportcount GET参数进行消毒、验证或转译。攻击者可利用该漏洞导致在登陆时实现跨站点脚本问
CVSS Information
N/A
Vulnerability Type
N/A