Lucene search
PRIOn knowledge basePRION:CVE-2023-1806HistoryMay 08, 2023 - 2:15 p.m.
Cross site scripting
2023-05-0814:15:00
PRIOn knowledge base
www.prio-n.com
2
wordpress
inventory manager
vulnerability
cross-site scripting
administrator
0.001 Low
EPSS
Percentile
31.0%
The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrators.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_inventory_manager | lt | 2.1.0.12 |
Related
cve
cve
CVE-2023-1806
2023-05-08 14:15:13
wpvulndb
wpvulndb
WP Inventory Manager < 2.1.0.12 - Reflected XSS
2023-04-12 00:00:00
nvd
nvd
CVE-2023-1806
2023-05-08 14:15:13
wpexploit
wpexploit
WP Inventory Manager < 2.1.0.12 - Reflected XSS
2023-04-12 00:00:00
cvelist
cvelist
CVE-2023-1806 WP Inventory Manager < 2.1.0.12 - Reflected XSS
2023-05-08 13:58:13
wordfence
wordfence