Knowledge Base For Documentation Faqs With Ai Assistance
Monthly
Unauthenticated cross-site scripting in the Echo Knowledge Base WordPress plugin (versions <= 17.211.0) allows a remote attacker to inject and execute arbitrary JavaScript in a victim's browser session. The vulnerability requires no authentication to exploit but does require a victim to interact with the affected content, as reflected in the CVSS UI:R metric and scope change (S:C). No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the low attack complexity and zero-privilege requirement make this accessible to unsophisticated attackers targeting WordPress deployments running this plugin.
Unauthenticated cross-site scripting in the Echo Knowledge Base WordPress plugin (versions <= 17.211.0) allows a remote attacker to inject and execute arbitrary JavaScript in a victim's browser session. The vulnerability requires no authentication to exploit but does require a victim to interact with the affected content, as reflected in the CVSS UI:R metric and scope change (S:C). No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the low attack complexity and zero-privilege requirement make this accessible to unsophisticated attackers targeting WordPress deployments running this plugin.