CVE-2026-4083:詳細資料

CVE-2026-4083

6.4
/
中危
0.06%V4
2026-03-21
00h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-04-22
21h32 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

The Scoreboard for HTML5 Games Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'scoreboard' shortcode in all versions up to, and including, 1.2. The shortcode function sfhg_shortcode() allows arbitrary HTML attributes to be added to the rendered