The Ibtana WordPress plugin v1.1.8.8 allows stored cross-site scripting via unchecked shortcode attributes
Reporter | Title | Published | Views | Family All 6 |
---|---|---|---|---|
![]() | Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode | 20 Dec 202200:00 | – | wpvulndb |
![]() | CVE-2022-4674 Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode | 6 Feb 202319:59 | – | cvelist |
![]() | Cross site scripting | 6 Feb 202320:15 | – | prion |
![]() | Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode | 20 Dec 202200:00 | – | wpexploit |
![]() | WordPress Ibtana Plugin < 1.1.8.8 is vulnerable to Cross Site Scripting (XSS) | 11 Jan 202300:00 | – | patchstack |
![]() | CVE-2022-4674 | 6 Feb 202320:15 | – | nvd |
[
{
"vendor": "Unknown",
"product": "Ibtana",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.1.8.8"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo