Lucene search
PRIOn knowledge basePRION:CVE-2022-0680HistoryMar 28, 2022 - 6:15 p.m.
Cross site scripting
2022-03-2818:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
45.7%
The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plz_configuration_tracker_enable option, which is then displayed in the admin panel without sanitisation and escaping, leading to a Stored Cross-Site Scripting issue
Related
cve
cve
CVE-2022-0680
2022-03-28 18:15:09
nvd
nvd
CVE-2022-0680
2022-03-28 18:15:09
wpexploit
wpexploit
Plezi < 1.0.3 - Unauthenticated Stored XSS
2022-03-07 00:00:00
cvelist
cvelist
CVE-2022-0680 Plezi < 1.0.3 - Unauthenticated Stored XSS
2022-03-28 17:23:16
patchstack
patchstack
wpvulndb
wpvulndb
Plezi < 1.0.3 - Unauthenticated Stored XSS
2022-03-07 00:00:00