Lucene search

PRIOn knowledge basePRION:CVE-2023-0769

HistoryJan 16, 2024 - 4:15 p.m.

Cross site scripting

2024-01-1616:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

wordpress

plugin vulnerability

reflected xss

high-privilege users

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

The hiWeb Migration Simple WordPress plugin through 2.0.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high-privilege users such as admins.

CPENameOperatorVersion
migration_simplele2.0.0.1

CPE	Name	Operator	Version
	migration_simple	le	2.0.0.1

References

wpscan.com/vulnerability/1d4a2f0e-a371-4e27-98de-528e070f41b0/