一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月6日

CVE-2026-83544 – The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation

未分类
📑 文章目录

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.