Lucene search
PRIOn knowledge basePRION:CVE-2023-3356HistoryAug 30, 2023 - 3:15 p.m.
Cross site scripting
2023-08-3015:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
csrf
stored cross-site scripting
subscribers text counter
The Subscribers Text Counter WordPress plugin before 1.7.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping
| CPE | Name | Operator | Version |
|---|---|---|---|
| subscribers_text_counter | lt | 1.7.1 |
Related
nvd
nvd
CVE-2023-3356
2023-08-30 15:15:09
wpexploit
wpexploit
Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS
2023-08-04 00:00:00
wpvulndb
wpvulndb
Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS
2023-08-04 00:00:00
cve
cve
CVE-2023-3356
2023-08-30 15:15:09
cvelist
cvelist
wordfence
wordfence