Lucene search
PRIOn knowledge basePRION:CVE-2023-0421HistoryMay 08, 2023 - 2:15 p.m.
Cross site scripting
2023-05-0814:15:00
PRIOn knowledge base
www.prio-n.com
4
cloud manager
wordpress plugin
unauthenticated attackers
xss payload
unsanitized query param
0.001 Low
EPSS
Percentile
47.2%
The Cloud Manager WordPress plugin through 1.0 does not sanitise and escape the query param ricerca before outputting it in an admin panel, allowing unauthenticated attackers to trick a logged in admin to trigger a XSS payload by clicking a link.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cloud_manager | le | 1.0 |
Related
wpvulndb
wpvulndb
Cloud Manager <= 1.0 - Reflected XSS
2023-04-12 00:00:00
wpexploit
wpexploit
Cloud Manager <= 1.0 - Reflected XSS
2023-04-12 00:00:00
nvd
nvd
CVE-2023-0421
2023-05-08 14:15:11
cve
cve
CVE-2023-0421
2023-05-08 14:15:11
cvelist
cvelist
CVE-2023-0421 Cloud Manager <= 1.0 - Reflected XSS
2023-05-08 13:58:04
wordfence
wordfence