CVE-2021-34663 in jQuery Tagline Rotator Plugin

Riassunto

di MITRE • 16/08/2021

The jQuery Tagline Rotator WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/jquery-tagline-rotator.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.1.5.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: [email protected]
• Prenotare: 10/06/2021
• Divulgazione: 16/08/2021
• Moderazione: accettato
• Voce: VDB-180951
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00895
• KEV: no
• Attività: molto basso
• Settore: Finance, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-34663
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-34663
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-34663/