PT-2025-1923 · WordPress · Bulk Me Now!
CVSS v3.1
7.1
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Bulk Me Now! WordPress plugin versions through 2.0
Description
The issue is related to a Reflected Cross-Site Scripting problem, where a
parameter is not properly sanitised and escaped before being outputted back in the page. This could be exploited against high privilege users, such as administrators.Recommendations
Bulk Me Now! WordPress plugin versions through 2.0: Update the plugin to a version that properly sanitises and escapes parameters to prevent Reflected Cross-Site Scripting attacks.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Bulk Me Now!