Lucene search
PRIOn knowledge basePRION:CVE-2023-4151HistorySep 04, 2023 - 12:15 p.m.
Cross site scripting
2023-09-0412:15:00
PRIOn knowledge base
www.prio-n.com
6
wordpress
store locator
vulnerability
cross-site scripting
ajax
nonce
reflected
high privilege users
0.0005 Low
EPSS
Percentile
17.1%
The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| store_locator | lt | 1.4.13 |
Related
wpvulndb
wpvulndb
Store Locator WordPress < 1.4.13 - Reflected XSS
2023-08-10 00:00:00
cve
cve
CVE-2023-4151
2023-09-04 12:15:10
cvelist
cvelist
CVE-2023-4151 Store Locator WordPress < 1.4.13 - Reflected XSS
2023-09-04 11:26:58
nvd
nvd
CVE-2023-4151
2023-09-04 12:15:10
wpexploit
wpexploit
Store Locator WordPress < 1.4.13 - Reflected XSS
2023-08-10 00:00:00