The Crazy Bone WordPress plugin through 0.6.0 does not sanitise and escape the username submitted via the login from when displaying them back in the log dashboard, leading to an unauthenticated Stored Cross-Site scripting
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2022-02-28 09:15
Updated : 2022-02-28 13:37
NVD link : CVE-2022-0385
Mitre link : CVE-2022-0385
JSON object : View
Products Affected
No product.
CWE
No CWE.
