CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in editionskezzal Cobwebo URL Plugin cobwebo-url allows Reflected XSS.This issue affects Cobwebo URL Plugin: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
The Cobwebo URL Plugin version 1.0 and earlier contains a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages. An attacker can craft a malicious URL and trick a site visitor into clicking it, causing the injected script to execute in the victim's browser. This can lead to session hijacking, credential theft, or defacement of site content.
What an attacker can do
Inject malicious JavaScript that executes in a visitor's browser when they click a crafted link.
Potential impact on your site
Visitors' sessions and credentials can be stolen; site content can be modified or defaced in their browsers.
Conditions required to exploit
The victim must click a link or visit a page containing the attacker's malicious URL.
Key dates
External resources
Related vulnerabilities
