Lucene search
PRIOn knowledge basePRION:CVE-2023-4294HistorySep 11, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-09-1120:15:00
PRIOn knowledge base
www.prio-n.com
4
url shortify
unauthenticated attacker
malicious javascript
admin panel
0.001 Low
EPSS
Percentile
30.2%
The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link.
| CPE | Name | Operator | Version |
|---|---|---|---|
| url_shortify | lt | 1.7.6 |
Related
wpvulndb
wpvulndb
URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header
2023-08-21 00:00:00
cve
cve
CVE-2023-4294
2023-09-11 20:15:11
wpexploit
wpexploit
URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header
2023-08-21 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-4294
2023-09-11 20:15:11
wordfence
wordfence