Lucene search
WPScanCVELIST:CVE-2023-0333HistoryFeb 13, 2023 - 2:32 p.m.
CVE-2023-0333 TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
2023-02-1314:32:14
WPScan
www.cve.org
1
cve-2023-0333; templatesnext toolkit; wordpress; stored xss; contributor role; html tag validation; cross-site scripting
0.001 Low
EPSS
Percentile
23.5%
The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
CNA Affected
[
{
"vendor": "Unknown",
"product": "TemplatesNext ToolKit",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "3.2.9"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-0333
2023-02-13 15:15:21
prion
prion
Cross site scripting
2023-02-13 15:15:00
nvd
nvd
CVE-2023-0333
2023-02-13 15:15:21
wpvulndb
wpvulndb
TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
2023-01-18 00:00:00
wpexploit
wpexploit
TemplatesNext ToolKit < 3.2.9 - Contributor+ Stored XSS
2023-01-18 00:00:00