Lucene search
PRIOn knowledge basePRION:CVE-2023-4799HistoryNov 20, 2023 - 7:15 p.m.
Cross site scripting
2023-11-2019:15:00
PRIOn knowledge base
www.prio-n.com
5
cross site scripting
magic embeds plugin
stored attack
contributor role
The Magic Embeds WordPress plugin before 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| magic_embeds | lt | 3.1.2 |
Related
nvd
nvd
CVE-2023-4799
2023-11-20 19:15:09
cve
cve
CVE-2023-4799
2023-11-20 19:15:09
cvelist
cvelist
CVE-2023-4799 Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
2023-11-20 18:55:04
wpexploit
wpexploit
Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
2023-10-27 00:00:00
wpvulndb
wpvulndb
Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
2023-10-27 00:00:00
wordfence
wordfence