Beveiligingsadvies

CVE-2021-39320

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-09-01 14:15:35

Laatst bijgewerkt 2025-05-05 14:50:43

Toegewezen door Wordfence

CVSS-score 6.1

Status PUBLISHED

Beschrijving

The underConstruction plugin <= 1.18 for WordPress echoes out the raw value of `$GLOBALS['PHP_SELF']` in the ucOptions.php file. On certain configurations including Apache+modPHP, this makes it possible to use it to perform a reflected Cross-Site Scripting attack by injecting malicious code in the request path.

← Alle CVE's bekijken Bekijk op cve.org ↗