Lucene search
PRIOn knowledge basePRION:CVE-2023-3170HistorySep 11, 2023 - 8:15 p.m.
Cross site scripting
2023-09-1120:15:00
PRIOn knowledge base
www.prio-n.com
10
tagdiv composer
wordpress plugin
newspaper theme
newsmag theme
stored cross-site scripting
admin privileges
unfiltered html
multi-site setup
vulnerability
0.0004 Low
EPSS
Percentile
14.1%
The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not validate and escape some settings, which could allow users with Admin privileges to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
| CPE | Name | Operator | Version |
|---|---|---|---|
| tagdiv_composer | lt | 4.2 |
Related
cve
cve
CVE-2023-3170
2023-09-11 20:15:09
nvd
nvd
CVE-2023-3170
2023-09-11 20:15:09
wpexploit
wpexploit
tagDiv Composer < 4.2 - Admin+ Stored XSS
2023-08-17 00:00:00
cvelist
cvelist
CVE-2023-3170 tagDiv Composer < 4.2 - Admin+ Stored XSS
2023-09-11 19:46:09
wpvulndb
wpvulndb
tagDiv Composer < 4.2 - Admin+ Stored XSS
2023-08-17 00:00:00
wordfence
wordfence