Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-4551
HistoryFeb 13, 2023 - 3:15 p.m.

Cross site scripting

2023-02-1315:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress plugin
rich table of contents
stored cross-site scripting

0.001 Low

EPSS

Percentile

23.4%

The Rich Table of Contents WordPress plugin before 1.3.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

CPENameOperatorVersion
rich_table_of_contentslt1.3.9

0.001 Low

EPSS

Percentile

23.4%

Related for PRION:CVE-2022-4551