Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Portfolio allows Reflected XSS. This issue affects WPZOOM Portfolio: from n/a through 1.4.21.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
Low
Affected products
- WPZOOM / WPZOOM Portfolion/a – 1.4.21
Exploits & proofs of concept
- exploit-dbWordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)by Kent Apostol
- nucleiWPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scriptingby aryu-ru
Updated 14m ago · 8 sources