E18-5orb1
CVSS:
6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
False Positive:
f
Variants:
1
Year:
2018
Description
This strike exploits a stored cross-site scripting vulnerability in WordPress Plugin Ninja Forms.
The vulnerability is due to improper sanitization of the 'end_date' parameter.
By successfully exploiting this vulnerability, an authenticated attacker could take control of the victim's browser.
