Lucene search

K
cvelistWPScanCVELIST:CVE-2023-2503
HistoryJun 05, 2023 - 1:38 p.m.

CVE-2023-2503 10WebSocial < 1.2.9 - Reflected XSS

2023-06-0513:38:58
WPScan
raw.githubusercontent.com
2
10websocial
wordpress
xss
vulnerability
reflected cross-site scripting
admin

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

Related for CVELIST:CVE-2023-2503