Lucene search
PRIOn knowledge basePRION:CVE-2022-3823HistoryNov 28, 2022 - 2:15 p.m.
Cross site scripting
2022-11-2814:15:00
PRIOn knowledge base
www.prio-n.com
8
cross site scripting
stored
high privilege users
admin
sanitise
escape
settings
unfiltered html
capability
multisite setup
0.001 Low
EPSS
Percentile
22.8%
The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
| CPE | Name | Operator | Version |
|---|---|---|---|
| beautiful_cookie_consent_banner | lt | 2.9.1 |
Related
cnvd
cnvd
cvelist
cvelist
CVE-2022-3823 Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
2022-11-28 13:47:24
cve
cve
CVE-2022-3823
2022-11-28 14:15:14
wpvulndb
wpvulndb
Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
2022-11-03 00:00:00
patchstack
patchstack
wpexploit
wpexploit
Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
2022-11-03 00:00:00
nvd
nvd
CVE-2022-3823
2022-11-28 14:15:14