Jsmol2wp Project: >> Jsmol2wp >> 1.07 Security Vulnerabilities
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter.
CVSS Score
6.1
EPSS Score
0.083
Published
2018-12-25
An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF.
CVSS Score
7.5
EPSS Score
0.83
Published
2018-12-25