Lucene search
PRIOn knowledge basePRION:CVE-2023-0418HistoryApr 24, 2023 - 7:15 p.m.
Cross site scripting
2023-04-2419:15:00
PRIOn knowledge base
www.prio-n.com
5
wordpress
video central
cross-site scripting
stored
vulnerability
0.001 Low
EPSS
Percentile
23.5%
The Video Central for WordPress plugin through 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| video_central | le | 1.3.0 |
Related
wpvulndb
wpvulndb
Video Central for WordPress <= 1.3.0 - Contributor+ Stored XSS
2023-03-28 00:00:00
cvelist
cvelist
CVE-2023-0418 Video Central for WordPress <= 1.3.0 - Contributor+ Stored XSS
2023-04-24 18:31:00
cve
cve
CVE-2023-0418
2023-04-24 19:15:08
wpexploit
wpexploit
Video Central for WordPress <= 1.3.0 - Contributor+ Stored XSS
2023-03-28 00:00:00
nvd
nvd
CVE-2023-0418
2023-04-24 19:15:08
wordfence
wordfence