WordPress plugin Divi Carousel Maker 跨站脚本漏洞

暂无

WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin Divi Carousel Maker 2.0.4版本及之前版本存在跨站脚本漏洞，该漏洞源于Image Carousel和Logo Carousel功能包含存储型跨站脚本漏洞。

来源:plugins.trac.wordpress.org 链接:https://plugins.trac.wordpress.org/browser/wow-carousel-for-divi-lite/trunk/includes/divi4/modules/ImageCarouselChild/ImageCarouselChild.php#L327 来源:plugins.trac.wordpress.org 链接:https://plugins.trac.wordpress.org/browser/wow-carousel-for-divi-lite/trunk/includes/divi4/modules/LogoCarouselChild/LogoCarouselChild.php#L168 来源:plugins.trac.wordpress.org 链接:https://plugins.trac.wordpress.org/changeset/3226742/ 来源:wordpress.org 链接:https://wordpress.org/plugins/wow-carousel-for-divi-lite/#developers 来源:www.wordfence.com 链接:https://www.wordfence.com/threat-intel/vulnerabilities/id/9e57a85b-3ea8-46df-ab60-ce835268b1f6?source=cve