VDB
CVE-2021-38319
CVE-2021-38319
PUBLISHED
CVSS 6.099999904632568 MEDIUM
The More From Google WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/morefromgoogle.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.0.2.
EPSS 0.89% · 57.9th percentile
Risk Scores
CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.89%
57.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| More From Google | More From Google | 0.0.2 |
| windyroad | more_from_google | 0 |
Timeline
- Sep 9, 2021 CVE Published
- Sep 10, 2021 EPSS Score
- Nov 7, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 30, 2022 EPSS Score
- Aug 25, 2022 EPSS Score
- Oct 22, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 16, 2023 EPSS Score
- Apr 15, 2023 EPSS Score