Lucene search
PRIOn knowledge basePRION:CVE-2023-0231HistoryFeb 21, 2023 - 9:15 a.m.
Cross site scripting
2023-02-2109:15:00
PRIOn knowledge base
www.prio-n.com
4
shoplentor
wordpress
stored cross-site scripting
0.001 Low
EPSS
Percentile
23.3%
The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shoplentor | lt | 2.5.4 |
Related
wpexploit
wpexploit
ShopLentor < 2.5.4 - Contributor+ Stored XSS
2023-01-28 00:00:00
wpvulndb
wpvulndb
ShopLentor < 2.5.4 - Contributor+ Stored XSS
2023-01-28 00:00:00
nvd
nvd
CVE-2023-0231
2023-02-21 09:15:12
cve
cve
CVE-2023-0231
2023-02-21 09:15:12
cvelist
cvelist
CVE-2023-0231 ShopLentor < 2.5.4 - Contributor+ Stored XSS
2023-02-21 08:50:38
openvas
openvas
WordPress ShopLentor Plugin < 2.5.4 Multiple Vulnerabilities
2023-02-28 00:00:00