-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHP| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| really-simple-plugins/complianz-gdpr | composer | < 6.4.2 | 6.4.2 |
Miggo AIRoot Cause AnalysisThe commit diff shows critical security fixes:- In class-document.php, added sanitize_text_field() and esc_html() for shortcode text attributes- Implemented esc_attr() for service/category in JS/HTML contexts- In functions.php, added sanitize_text_field() for revocation textThese fixes directly correlate to unescaped output of user-controlled shortcode attributes in three main functions. The vulnerability pattern matches WordPress shortcode XSS where attributes are reflected without proper sanitization/escaping. The pre-patch code lacked these security measures, making these functions clear injection points.
Ongoing coverage of React2Shell