Lucene search
PRIOn knowledge basePRION:CVE-2023-2354HistoryAug 31, 2023 - 6:15 a.m.
Cross site scripting
2023-08-3106:15:00
PRIOn knowledge base
www.prio-n.com
2
cross-site scripting
wordpress
plugin vulnerability
input sanitization
ajax action
insufficient output escaping
authenticated attackers
subscriber-level permissions
0.001 Low
EPSS
Percentile
20.3%
The CHP Ads Block Detector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings reachable though an AJAX action in versions up to, and including, 3.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chp_ads_block_detector | le | 3.9.4 |
References
Related
cvelist
cvelist
CVE-2023-2354
2023-08-31 05:33:10
nvd
nvd
CVE-2023-2354
2023-08-31 06:15:09
cve
cve
CVE-2023-2354
2023-08-31 06:15:09
wordfence
wordfence