Lucene search
WPScanCVELIST:CVE-2023-4022HistorySep 11, 2023 - 7:46 p.m.
CVE-2023-4022 Herd Effects < 5.2.3 - Admin+ Stored XSS
2023-09-1119:46:06
WPScan
www.cve.org
cve-2023-4022
herd effects
wordpress
stored xss
admin
settings
privilege escalation
cross-site scripting
0.0004 Low
EPSS
Percentile
14.0%
The Herd Effects WordPress plugin before 5.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CNA Affected
[
{
"vendor": "Unknown",
"product": "Herd Effects",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "5.2.3"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-4022
2023-09-11 20:15:11
wpvulndb
wpvulndb
Herd Effects < 5.2.3 - Admin+ Stored XSS
2023-08-21 00:00:00
wpexploit
wpexploit
Herd Effects < 5.2.3 - Admin+ Stored XSS
2023-08-21 00:00:00
prion
prion
Cross site scripting
2023-09-11 20:15:00
nvd
nvd
CVE-2023-4022
2023-09-11 20:15:11