Lucene search
PRIOn knowledge basePRION:CVE-2023-0536HistoryMay 08, 2023 - 2:15 p.m.
Cross site scripting
2023-05-0814:15:00
PRIOn knowledge base
www.prio-n.com
1
wordpress
plugin
vulnerability
stored cross-site scripting
0.001 Low
EPSS
Percentile
23.5%
The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Related
nvd
nvd
CVE-2023-0536
2023-05-08 14:15:11
wpvulndb
wpvulndb
Wp-D3 <= 2.4.1 - Contributor+ Stored XSS
2023-04-17 00:00:00
cvelist
cvelist
CVE-2023-0536 Wp-D3 <= 2.4.1 - Contributor+ Stored XSS
2023-05-08 13:58:16
wpexploit
wpexploit
Wp-D3 <= 2.4.1 - Contributor+ Stored XSS
2023-04-17 00:00:00
cve
cve
CVE-2023-0536
2023-05-08 14:15:11
wordfence
wordfence