The Asgaros Forums WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the name parameter found in the ~/admin/tables/admin-structure-table.php file which. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
PHP
WordPress
XSS
Wordpress Plugin
Asgaros Forum
+1
NVD
CVSS 3.1
4.8
EPSS
0.7%
Prev
Page 2 of 2