CVE-2022-1217

CVE-2022-1217

The Custom TinyMCE Shortcode Button WordPress plugin through 1.1 does not sanitise and escape the PHP_SELF variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.

Source: CVE-2022-1217

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다