Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-2624
HistoryJun 27, 2023 - 2:15 p.m.

Cross site scripting

2023-06-2714:15:00
PRIOn knowledge base
www.prio-n.com
3
kivicare
wordpress
cross-site scripting
reflected
vulnerability
administrator

0.001 Low

EPSS

Percentile

48.6%

The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as administrator

CPENameOperatorVersion
kivicarelt3.2.1

0.001 Low

EPSS

Percentile

48.6%