Michał Lipiński

اسم البرنامج المعرض للخطر والإصدارات المتأثرة Lodash الإصدارات من 4.0.0 إلى 4.17.22 الوصف الإصدارات من 4.0.0 إلى 4.17.22 من Lodash معرضة لثغرة «تلوث النموذج الأولي» في الدالتين ` .unset` و` .omit`. يمكن للمهاجم استغلال طرق معقدة لإحداث حذف طرق من النماذج الأولية العالمية. تسمح هذه الثغرة بحذف الخصائص، لكنها لا تسمح بتعديل السلوك الأصلي لتلك الخصائص. التوصيات قم بالتحديث إلى الإصدار 4.17.23 من Lodash أو أحدث.

The issue allows users with a role as low as contributor to set Cross-Site Scripting payload in the parameters from the shortcode, which will be triggered in the pages with the embed malicious shortcode.

The issue allows users with a role as low as contributor to set a Cross-Site Scripting payload in the parameters from the shortcode, which will be triggered in the pages with the embed malicious shortcode.

The issue allows users with a role as low as contributor to set Cross-Site Scripting payload in the parameters from the shortcode, which will be triggered in the pages with the embed malicious shortcode.

The issue allows users with a role as low as contributor to set Cross-Site Scripting payload in the parameters from its shortcode, which will be triggered in the pages with the embed malicious shortcode. This is due to the plugin not sanitising or validating the parameters from its shortcode.

The issue allows users with a role as low as contributor to set a Cross-Site Scripting payload in the parameters from its shortcode, which will be triggered in the page/s with the embed malicious shortcode.