Lucene search
WPScanCVELIST:CVE-2023-4798HistoryOct 16, 2023 - 7:39 p.m.
CVE-2023-4798 User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
2023-10-1619:39:09
WPScan
www.cve.org
cve-2023-4798
user avatar
wordpress
stored xss
contributors
0.0004 Low
EPSS
Percentile
14.0%
The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.
CNA Affected
[
{
"vendor": "Unknown",
"product": "User Avatar",
"versions": [
{
"status": "affected",
"versionType": "custom",
"version": "0",
"lessThan": "1.2.2"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpvulndb
wpvulndb
User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
2023-09-25 00:00:00
wpexploit
wpexploit
User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
2023-09-25 00:00:00
prion
prion
Cross site scripting
2023-10-16 20:15:00
cve
cve
CVE-2023-4798
2023-10-16 20:15:16
nvd
nvd
CVE-2023-4798
2023-10-16 20:15:16
wordfence
wordfence