Lucene search
PRIOn knowledge basePRION:CVE-2023-1403HistoryJun 09, 2023 - 6:15 a.m.
Cross site scripting
2023-06-0906:15:00
PRIOn knowledge base
www.prio-n.com
5
cross-site scripting
wordpress
vulnerability
authenticated attackers
contributor-level permissions
arbitrary web scripts
0.001 Low
EPSS
Percentile
40.5%
The Weaver Xtreme Theme for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up to, and including, 5.0.7. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| weaver_xtreme_theme | le | 5.0.7 |
Related
cvelist
cvelist
CVE-2023-1403
2023-06-09 05:33:18
cve
cve
CVE-2023-1403
2023-06-09 06:15:56
nvd
nvd
CVE-2023-1403
2023-06-09 06:15:56
wpvulndb
wpvulndb
Weaver Xtreme Theme < 6.2 - Contributor+ Stored Cross-Site Scripting
2023-04-05 00:00:00
zdt
zdt
wordfence
wordfence
packetstorm
packetstorm
WordPress Weaver Xtreme 5.0.7 / Weaver Show Posts 1.6 Cross Site Scripting
2023-04-18 00:00:00