Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:a:tromit:yabp:1.4:*:*:*:*:wordpress:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2021-38330 |
The Yet Another bol.com Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/yabp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4. Published: September 10, 2021; 10:15:09 AM -0400 |
V3.1: 6.1 MEDIUM V2.0: 4.3 MEDIUM |