Vulners
Lucene search
WordPress Seo By 10Web Cross Site Scripting
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | The vulnerability of the SEO plugin developed by 10Web, a content management system for WordPress, allows attackers to perform cross-site scripting attacks. | 1 Nov 202300:00 | – | bdu_fstec |
 | CVE-2023-2224 | 8 Jan 202516:20 | – | circl |
 | WordPress Plugin SEO by 10Web 跨站脚本漏洞 | 5 Jun 202300:00 | – | cnnvd |
 | CVE-2023-2224 | 5 Jun 202313:39 | – | cve |
 | CVE-2023-2224 Seo By 10Web < 1.2.7 - Admin+ Stored XSS | 5 Jun 202313:39 | – | cvelist |
 | EUVD-2023-33736 | 3 Oct 202520:07 | – | euvd |
 | Seo By 10Web < 1.2.7 - Cross-Site Scripting | 28 Jun 202615:08 | – | nuclei |
 | CVE-2023-2224 | 5 Jun 202314:15 | – | nvd |
 | CVE-2023-2224 | 5 Jun 202314:15 | – | osv |
 | WordPress Seo By 10Web Plugin < 1.2.7 is vulnerable to Cross Site Scripting (XSS) | 15 May 202300:00 | – | patchstack |
10
`Tittle:
WordPress Plugin Seo By 10Web < 2.8.1 - Admin+ Stored XSS
References:
CVE-2023-2224
Author:
Taurus Omar
Description:
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Affects Plugins:
Seo By 10Web - Fixed in version 1.2.7
Proof of Concept:
1. Go to SEO by 10Web » Sitemap section.
2. And new URL to the page.
3. Add XSS payload: "><audio src=x onerror=confirm("XSS")>
4. Save to trigger the XSS.
Classification:
Type XSS
OWASP top 10 A7: Cross-Site Scripting (XSS)
CWE-79
wpScan:
https://wpscan.com/vulnerability/a76b6d22-1e00-428a-8a04-12162bd0d992
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Jul 2023 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 3.14.8
EPSS0.00909
SSVC