PT-2018-10674
CVE-2018-11568
·
تاريخ النشر
2018-05-30
·
تاريخ التحديث
2018-07-13
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
GamePlan theme for WordPress versions prior to 1.5.13.2
Description
The issue is related to insufficient input sanitization, allowing for Reflected XSS. This can be demonstrated through the
s parameter. In some cases, the '<' and '>' characters are represented as '<' and '>'.Recommendations
For versions prior to 1.5.13.2, update to a version that includes the necessary input sanitization fixes to prevent Reflected XSS. As a temporary workaround, consider restricting user input to prevent the injection of malicious code.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾