The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 allows stored Cross-Site Scripting attacks
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
![]() | Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS | 23 Jan 202300:00 | – | wpexploit |
![]() | CVE-2023-0177 | 13 Feb 202315:15 | – | nvd |
![]() | CVE-2023-0177 Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS | 13 Feb 202314:32 | – | vulnrichment |
![]() | CVE-2023-0177 Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS | 13 Feb 202314:32 | – | cvelist |
![]() | WordPress Social Like Box and Page by WpDevArt Plugin < 0.8.41 is vulnerable to Cross Site Scripting (XSS) | 23 Jan 202300:00 | – | patchstack |
![]() | Cross site scripting | 13 Feb 202315:15 | – | prion |
![]() | Social Like Box and Page by WpDevArt < 0.8.41 - Contributor+ Stored XSS | 23 Jan 202300:00 | – | wpvulndb |
[
{
"vendor": "Unknown",
"product": "Social Like Box and Page by WpDevArt",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "0.8.41"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
height | nested | /wp-content/plugins/wpdevart-social-like-box/shortcode.php | Stored Cross-Site Scripting due to improper escaping of shortcode attributes. | CWE-79 |
border_color | nested | /wp-content/plugins/wpdevart-social-like-box/shortcode.php | Stored Cross-Site Scripting due to improper escaping of shortcode attributes. | CWE-79 |
locale | nested | /wp-content/plugins/wpdevart-social-like-box/shortcode.php | Stored Cross-Site Scripting due to improper escaping of shortcode attributes. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo