Lucene search
PRIOn knowledge basePRION:CVE-2022-4786HistoryFeb 21, 2023 - 9:15 a.m.
Cross site scripting
2023-02-2109:15:00
PRIOn knowledge base
www.prio-n.com
2
video.js wordpress plugin
stored cross-site scripting
shortcode attributes
contributor role
0.001 Low
EPSS
Percentile
23.3%
The Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Related
cve
cve
CVE-2022-4786
2023-02-21 09:15:11
wpvulndb
wpvulndb
cvelist
cvelist
nvd
nvd
CVE-2022-4786
2023-02-21 09:15:11
wpexploit
wpexploit