Lucene search
WPScanCVELIST:CVE-2023-4376HistorySep 19, 2023 - 7:06 p.m.
CVE-2023-4376 Serial Codes Generator and Validator with WooCommerce Support < 2.4.15 - Admin+ Stored XSS
2023-09-1919:06:03
WPScan
www.cve.org
2
wordpress
plugin
stored xss
woocommerce
vulnerability
EPSS
0.001
Percentile
23.9%
The Serial Codes Generator and Validator with WooCommerce Support WordPress plugin before 2.4.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CNA Affected
[
{
"vendor": "Unknown",
"product": "Serial Codes Generator and Validator with WooCommerce Support",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "2.4.15"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
cve
cve
CVE-2023-4376
2023-09-19 20:15:09
wpexploit
wpexploit
prion
prion
Cross site scripting
2023-09-19 20:15:00
wpvulndb
wpvulndb
nvd
nvd
CVE-2023-4376
2023-09-19 20:15:09