CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in chaozh Simple Post Series simple-post-series allows Reflected XSS.This issue affects Simple Post Series: from n/a through <= 2.4.4.
Explanation of Vulnerability in Simple Terms
Simple Post Series versions 2.4.4 and earlier contain a cross-site scripting (XSS) vulnerability. An attacker can inject malicious scripts that execute in a victim's browser when they visit an affected page. The vulnerability requires user interaction and can affect other users or site functionality. Update to a version newer than 2.4.4 to resolve this issue.
What an attacker can do
Inject malicious scripts that run in a victim's browser, potentially stealing session data or performing actions on their behalf.
Potential impact on your site
Visitors to your site could have their sessions hijacked or be redirected to malicious sites; your site's reputation may be damaged.
Conditions required to exploit
Victim must visit a page containing the attacker's malicious input; no authentication required.
Key dates
External resources
Related vulnerabilities
