Lucene search
PRIOn knowledge basePRION:CVE-2023-2743HistoryJun 27, 2023 - 2:15 p.m.
Cross site scripting
2023-06-2714:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
reflected xss
wordpress
erp plugin
security vulnerability
admin privilege
0.001 Low
EPSS
Percentile
20.5%
The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
Related
wpvulndb
wpvulndb
WP ERP < 1.12.4 - Reflected Cross-Site Scripting
2023-06-05 00:00:00
wpexploit
wpexploit
WP ERP < 1.12.4 - Reflected Cross-Site Scripting
2023-06-05 00:00:00
cvelist
cvelist
CVE-2023-2743 WP ERP < 1.12.4 - Reflected Cross-Site Scripting
2023-06-27 13:17:05
cve
cve
CVE-2023-2743
2023-06-27 14:15:11
nvd
nvd
CVE-2023-2743
2023-06-27 14:15:11