Lucene search

K
cvelistWPScanCVELIST:CVE-2022-4781
HistoryJan 30, 2023 - 8:31 p.m.

CVE-2022-4781 Accordion Shortcodes <= 2.4.2 - Contributor+ Stored XSS via Shortcode

2023-01-3020:31:52
WPScan
raw.githubusercontent.com
1

0.001 Low

EPSS

Percentile

22.6%

The Accordion Shortcodes WordPress plugin through 2.4.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

0.001 Low

EPSS

Percentile

22.6%

Related for CVELIST:CVE-2022-4781