Lucene search
PRIOn knowledge basePRION:CVE-2023-4284HistorySep 04, 2023 - 12:15 p.m.
Cross site scripting
2023-09-0412:15:00
PRIOn knowledge base
www.prio-n.com
8
wordpress
plugin
cross-site scripting
security
ajax
nvd
0.0005 Low
EPSS
Percentile
17.0%
The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| post_timeline | lt | 2.2.6 |
Related
wpvulndb
wpvulndb
Post Timeline < 2.2.6 - Reflected XSS
2023-08-10 00:00:00
cvelist
cvelist
CVE-2023-4284 Post Timeline < 2.2.6 - Reflected XSS
2023-09-04 11:26:59
cve
cve
CVE-2023-4284
2023-09-04 12:15:10
nvd
nvd
CVE-2023-4284
2023-09-04 12:15:10
wpexploit
wpexploit
Post Timeline < 2.2.6 - Reflected XSS
2023-08-10 00:00:00
wordfence
wordfence