WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Unauthenticated Stored Cross-Site Scripting

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

WordPress plugin WP Cerber Security, Anti-spam & Malware Scan 跨站脚本漏洞

WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是WordPress开源的一个应用插件。 WordPress plugin WP Cerber Security, Anti-spam & Malware Scan 存在跨站脚本漏洞，该漏洞源于在将 $url 变量用于插件仪表板的“活动”选项卡中的属性之前不会对其进行清理。

N/A

N/A